Arria10 Secure Boot : program fuses

[ChristianMS]

Hello,

We are currently using U-Boot 2024.04, and all components are signed (U-Boot SPL, U-Boot 2nd stage, Kernel/DTB).
Our final step is to program the fuses on the Arria 10 FPGA.

The alt_authtool.py script generates a file containing the hash of the root public key, which needs to be burned into the device fuses. However, we are unsure how to actually program this hash into the FPGA.

• Could you please advise us on the procedure to program the fuses?
• Which tools should we use?
• Are there any specific caveats or important points we should be aware of?

Thank you in advance for your support.

Best regards,
Christian & Baptiste

[BoonkhaiN_Altera · Accepted solution]

Hi, you can refer to this documentation

Be sure what you are doing, once fuse is blown, it becomes permanent and cannot be reversed, below is the step.

https://www.intel.com/content/www/us/en/docs/programmable/683269/current/programming-single-device-volatile-or-67141.html

For more information about A10 security you can refer to this document

https://www.intel.com/content/www/us/en/docs/programmable/683060/20-4/an-759-using-secure-boot-in-soc-devices.html

Regards,

Boon Khai

[Jeet14]

Please login to ‘https://supporttickets.intel.com/s/?language=en_US’, view details of the desire request, and post a feed/response within the next 15 days to allow me to continue to support you. After 15 days, this thread will be transitioned to community support. The community users will be able to help you on your follow-up questions.