SPRUJC1 April   2024

 

  1.   1
  2.   Abstract
  3.   Trademarks
  4. 1Introduction
    1. 1.1 Unlocking JTAG With Jacinto7 Security Enabled Devices
  5. 2Steps to Unlock JTAG for HSM Core With TRACE32
    1. 2.1 Modifying the SCI Client Default Security Board Configuration
      1. 2.1.1 PROCESSOR-SDK-RTOS
      2. 2.1.2 PROCESSOR-SDK-LINUX
    2. 2.2 Building the SCI Client Security Board Configuration
      1. 2.2.1 PROCESSOR-SDK-RTOS
      2. 2.2.2 PROCESSOR-SDK-LINUX
    3. 2.3 Modifying the Secondary Bootloader’s x509 Certificate
      1. 2.3.1 Windows Build Environment
      2. 2.3.2 Ubuntu Build Environment
    4. 2.4 Building the Secondary Bootloader
    5. 2.5 Verifying Secondary Bootloader and TIFS is Executing
    6. 2.6 Creating a Downloadable x509 Certificate With a Debug Extension
    7. 2.7 Execution of TRACE32 Unlock Script
    8. 2.8 Attaching to HSM Core With TRACE32

2.4 Building the Secondary Bootloader

After confirming the SBL’s x509 certificate no longer contains the debug extension for JTAG unlock, the next step is to build the SBL within the PROCESSOR-SDK-RTOS. In order to do so please navigate to the <pdk_path>/packages/ti/build/ directory and open a command prompt. Next, the following make commands should be executed in sequential order without any build errors:

make sciclient_boardcfg_hs BOARD=j721s2_evm CORE=mcu1_0 OS=linux

make pdk_libs BOARD=j721s2_evm CORE=mcu1_0 OS=linux

make sbl_mmcsd_img_hs BOARD=j721s2_evm CORE=mcu1_0 OS=linux

cp packages/ti/boot/sbl/binary/j721s2_evm_hs/mmcsd/bin/sbl_mmcsd_img_mcu1_0_release.tiimage /media/<xyz>/boot/tiboot3.bin
Note: The make command to build the sbl_*_img_hs will change pending the boot media you are using. The SBL make command example above is using MMC SD Card as the boot media with Ubuntu as the build environment.