AN 759: Using Secure Boot in Intel® Arria® 10 SoC Devices

ID 683060
Date 3/29/2021
Document Table of Contents

Creating a Signed and Encrypted First-Stage Boot Loader Image

The following example shows how to perform the following tasks.

  1. Create a secure signing and an encryption key.
  2. Generate and build an encrypted boot loader image with the secure encryption key, using the Intel® Arria® 10 SoC FPGA Authentication Signing Utility.
  3. Demonstrate secure boot using the encrypted boot loader image from the SD card.
  4. Follow steps Step 1 to Step 4 from the Creating an Encrypted First-Stage Boot Loader Image section.
  5. Use the encrypted image in Step 1 and sign the image, refer to the steps from the Creating a Signed First-Stage Boot Loader Image from Step 3.
  6. Program the authentication key and encryption key to the board virtually.
  7. Copy u-boot_w_dtb-signed-encrypted-x4.abin to the SD/MMC, QSPI, and NAND flash on the board.
  8. Boot the board.