To program a JIC file into a QSPI device via an Intel® Stratix® 10 FPGA that has a volatile root key programmed, you need to first generate a QSPI helper image.
You then need to sign the QSPI helper image with your owner key and configure the FPGA with it before performing JIC programming.
When doing this, unselect the box associated with the default helper image in the Intel® Quartus® Prime Programmer.
Here is an example of how to generate the QSPI helper image and sign it.
quartus_pfg --helper_image -o helper_device=1SG110HN3AS -o subtype=QSPI-o fw_source=signed_stratix10.zip qspi_helper_image.rbf
quartus_sign --family=Stratix10 --operation=sign --qky=owner.qky --pem=private.pem qspi_helper_image.rbf signed_qspi_helper_image.rbf
This information will be included in a future release of the Intel® Stratix® 10 Device Security User Guide