AN 759: Using Secure Boot in Intel® Arria® 10 SoC Devices

ID 683060
Date 3/29/2021
Document Table of Contents

Secure Boot Stages

A secure boot system ensures that software running on the Intel® Arria® 10 SoC hard processor system (HPS) is trusted. To ensure this trust, after power-on reset, the HPS executes the trusted first stage boot ROM firmware stored in the device. Each subsequent stage is only loaded and executed if it is authenticated by the current boot stage.

Figure 1.  Intel® Arria® 10 SoC Secure Boot Stages
Note: You can configure the Intel® Arria® 10 SoC device and the second-stage boot loader so that first and second stages boot securely. If required, you can generate additional signing keys and encryption keys for images in subsequent stages including the OS and application stage. If a subsequent image requires encryption and the encryption key is embedded in the boot loader, then the boot loader image must also be encrypted using the root AES key.

For more information on the Intel® Arria® 10 boot stages and second-stage boot loader, refer to the Intel® Arria® 10 SoC Boot User Guide.