UPGRADE YOUR BROWSER

We have detected your current browser version is not the latest one. Xilinx.com uses the latest web technologies to bring you the best online experience possible. Please upgrade to a Xilinx.com supported browser:Chrome, Firefox, Internet Explorer 11, Safari. Thank you!

cancel
Showing results for 
Search instead for 
Did you mean: 
Visitor pwirges
Visitor
476 Views
Registered: ‎09-19-2018

Zynq Flash Tool Not Working with Secureboot

We can not get the Zynq flash tool to work when our UUT is booted up securely.  The tool works just fine if we use unencrypted images or use JTAG boot mode. 

 

We have 5 Zynqs on the JTAG chain: one is a z100, the other four are z030s, and we are using SDK 2016.4. On all of the Zynqs, we are using encrypted fsbls, bitstreams, and sw images. We have not burned the e-fuse, and are using the default 0s key. We have updated the FSBL code on all of them to re-enable the JTAG chain and DAP as specified in xapp1175 pg69.  We confirmed this write took effect:


0xf8007000:  4e00feff

 

Adding this command allowed the JTAG chain to populate in the tool, but the tool hangs when ran in various different ways.

 

  • Re-enabling JTAG and DAP at the FSBL entry, the tool hangs on the uboot splash.

 

  • Re-enabling JTAG and DAP in FsblHookBeforeHandoff, the tool hangs after the following register writes:

    WRITE: addr=0xF8000714, Data=0x00001602

    ===== mrd->addr=0xF8000718, data=0x00000602 =====

    READ: addr=0xF8000718, Data=0x00000602

    MioPinEnableOut32 @ f8000718 = 00001602

    ===== mwr->addr=0xF8000718, data=0x00001602 =====

    WRITE: addr=0xF8000718, Data=0x00001602

    ===== mrd->addr=0xF8000720, data=0x00000602 =====

    READ: addr=0xF8000720, Data=0x00000602

    MioPi

Also in this case, the Zynq re-enters the FSBL when the tool commands it to reset, I have not seen this occur when using the tool in the non-secure boot case.

 

  •  

    I tried setting the environment variable XIL_CSE_ZYNQ_SKIP_RESET = 1 as per this post: https://forums.xilinx.com/t5/Embedded-Processor-System-Design/QSPI-Flash-upgrade-after-Secure-Boot/td-p/362915

    In this case, the reset was skipped, but the tool can't seem to read anything over the DAP:

    READ: addr=0xF800010C, Data=0x00000000

    READ: addr=0xF800010C, Data=0x00000000

    READ: addr=0xF800010C, Data=0x00000000

    READ: addr=0xF800010C, Data=0x00000000

    READ: addr=0xF800010C, Data=0x00000000

  •  

    I also tried configuring XIL_CSE_ZYNQ_UBOOT_QSPI_FREQ_HZ = 10000000 as a long shot, and that changed nothing.

Any thoughts? We can currently work around this using JTAG Boot mode, but it would be much more convenient if we did not have to.

 

0 Kudos
3 Replies
Xilinx Employee
Xilinx Employee
447 Views
Registered: ‎10-11-2011

Re: Zynq Flash Tool Not Working with Secureboot

zynq-7000? You need to use the JTAG boot mode. I think the tool does a reset nomatter what and your system will ended up with a secure boot (no JTAG).

-------------------------------------------------------------------------
Don’t forget to reply, kudo, and accept as solution.
-------------------------------------------------------------------------
0 Kudos
Visitor pwirges
Visitor
421 Views
Registered: ‎09-19-2018

Re: Zynq Flash Tool Not Working with Secureboot

That is how we have been working around this, but it is inconvenient due to various other factors in our test setup.  So to confirm, there is no way around that?

0 Kudos
Xilinx Employee
Xilinx Employee
410 Views
Registered: ‎10-11-2011

Re: Zynq Flash Tool Not Working with Secureboot

If XIL_CSE_ZYNQ_SKIP_RESET = 1 didn't do the trick, I don't know what else to try.

-------------------------------------------------------------------------
Don’t forget to reply, kudo, and accept as solution.
-------------------------------------------------------------------------
0 Kudos