Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Modify secure boot setup to check hab events before closing #12

Draft
wants to merge 5 commits into
base: master
Choose a base branch
from

Conversation

alexgg
Copy link
Contributor

@alexgg alexgg commented Feb 3, 2025

No description provided.

@alexgg alexgg marked this pull request as draft February 3, 2025 13:24
This allows to check there are no HAB events before closing a device.

Change-type: patch
Signed-off-by: Alex Gonzalez <alexg@balena.io>
This allows to program the SRK efuses, reboot, and check the HAB events
before closing the device.

Signed-off-by: Alex Gonzalez <alexg@balena.io>
@alexgg alexgg force-pushed the alexgg/provision branch 6 times, most recently from eee5ce5 to 000c4d7 Compare February 6, 2025 16:13
The new secure boot setup involves:

* Program SRK efuses and reboot
* Check there are no HAB events
* Then close the device and reboot so the new OTPMK keys take effect
* Then program and encrypt disks

Change-type: major
Signed-off-by: Alex Gonzalez <alexg@balena.io>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant