cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted
Visitor
Visitor
408 Views
Registered: ‎06-13-2018

Zynq UltraScale+ MP SOC: Load encrypted FSBL on reboot

Hi all, 

I'm working with a Xilinx Zynq UltraScale+ MP SOC and I would like to encrypt FSBL partition of the BOOT image, storing the AES key on BBRAM. 

I first load an unencrypted binary which writes the key on BBRAM: the operation completes succesfully. Then an encrypted image is loaded on the boot device (we usually do it with unencrypted images) and a reboot is triggered by Linux. No power cycle is performed. 

Unfortunately the board stucks immediately. Checking with Vivado tool I noticed REGISTER.JTAG_ERROR_STATUS.BIT104_CSU_BR_ERR_TYPE 0x5353, which is, according to TRM, "Changing the state from non-secure to secure is not allowed.".

Why is it happening? Is a power cycle mandatory to perform such transition? 

Many thanks in advance for your help. 

0 Kudos
1 Reply
Highlighted
Xilinx Employee
Xilinx Employee
226 Views
Registered: ‎10-11-2011

Are you doing a PS_POR_B or PS_SRST_B? Only the first should work in this case.

-------------------------------------------------------------------------
Don’t forget to reply, kudo, and accept as solution.
-------------------------------------------------------------------------
0 Kudos