A firmware instance is included in all application images, the factory image, and each copy of decision firmware. You may choose to deploy updates to the different instances of firmware in stages, but all instances of firmware, including the decision firmware, must be updated prior to utilizing the firmware anti-rollback feature. All steps in this section must be performed with the updated installation of Intel® Quartus® Prime Pro Edition or Intel® Quartus® Prime Programmer.

First, follow the instructions in the Generating an Application Image section of the Intel® Stratix® 10 Configuration User Guide to generate updates for your application images. You should check the box to additionally generate the Raw Binary File (.rbf) for each application image. If you are using firmware co-signing, specify the co-signed firmware file in the properties of each input .sof file as shown in the Specifying a co-signed firmware file in Programming File Generator.

You must also enable other device security features, such as authentication or encryption, during this step as appropriate. For each application image generated, you may verify the presence of updated firmware using the steps in the Verifying Firmware Updates section of this document.

The Intel® Stratix® 10 FPGA firmware implements a robust and reliable procedure to update the factory image, including the factory image firmware, and the copies of the decision firmware, all with one update image. After you created your updated application images, follow the instructions in the Generating a Factory Update Image section of the Intel® Stratix® 10 Configuration User Guide. If you are using firmware co-signing, specify the co-signed firmware in the .sofproperties as you turn on the Enable remote system firmware upgrade option. You must also enable other device security features, such as authentication or encryption, during this step as appropriate.