Visible to Intel only — GUID: rcz1616561900217
Ixiasoft
3.3.1. Configuration Bitstream Encryption Using the Programming File Generator Graphical Interface
3.3.2. Configuration Bitstream Encryption Using the Programming File Generator Command Line Interface
3.3.3. Partially Encrypted Configuration Bitstream Generation Using the Command Line Interface
3.3.4. Partial Reconfiguration Bitstream Encryption
4.1. Using SDM Provision Firmware
4.2. Authentication Root Key Provisioning
4.3. Programming Key Cancellation ID Fuses
4.4. Canceling Root Keys
4.5. Programming Counter Fuses
4.6. Secure Data Object Service Root Key Provisioning
4.7. Security Setting Fuse Provisioning
4.8. AES Root Key Provisioning
4.9. Converting Owner Root Key, AES Root Key Certificates, and Fuse files to Jam STAPL File Formats
Visible to Intel only — GUID: rcz1616561900217
Ixiasoft
3.3.2. Configuration Bitstream Encryption Using the Programming File Generator Command Line Interface
You use the quartus_pfg command line interface to generate an encrypted and signed configuration bitstream in .rbf format.
quartus_pfg -c encryption_enabled.sof top.rbf -o finalize_encryption=ON \
-o qek_file=aes_root.qek -o signing=ON -o pem_file=design0_sign_private.pem
You may convert an encrypted and signed configuration bitstream in .rbf format to other configuration bitstream file formats.