Due to a hardware limitation in the Remote System Upgrade (RSU) hard IP on Intel® Arria® 10 and Intel® Cyclone® 10 GX devices, the fall back to the Factory Image will not work when the first 1024 bytes of an encrypted Application Image is corrupted, specifically if reconfiguration is triggered via the “reconfig” signal of the RSU IP.
You should examine the first 1024 bytes of the Application Image to ensure these bytes are not corrupted before triggering the Application Image configuration.
Triggering reconfiguration via an nCONFIG pulse or power cycle your device can recover back to the Factory Image.