对于AM243X,我注意到SBL工程在使用CCS编译后会获得一个使用默认的KEY进行签名的image。我们在正式发布SBL时,是否可以直接使用这个编译得到的image,还是需要手动进行X509签名?CCS编译后自动进行的这个默认的KEY签名流程,与用户手动进行X509进行签名的Key有什么差异?
This thread has been locked.
If you have a related question, please click the "Ask a related question" button in the top right corner. The newly created question will be automatically linked to this question.
量产时用实际的MPK,请看下面网站上的说明。
Signing the SBL
If the SDK is supposed to be used with a production/development device with actual customer MPKs burnt into the device, please replace the file at ${SDK_INSTALL_PATH}/tools/boot/signing/custMpk_${SOC}.pem.
https://software-dl.ti.com/mcu-plus-sdk/esd/AM243X/latest/exports/docs/api_guide_am243x/SECURE_BOOT.html
您的意思是,调试的时候使用默认的KEY签名,即如下:
ifeq ($(OS),Windows_NT) BOOTIMAGE_CERT_GEN_CMD=powershell -executionpolicy unrestricted -command $(MCU_PLUS_SDK_PATH)/tools/boot/signing/x509CertificateGen.ps1 else BOOTIMAGE_CERT_GEN_CMD=$(MCU_PLUS_SDK_PATH)/tools/boot/signing/x509CertificateGen.sh endif
而实际用到产品上时,需要改为Mpk,即