Bootgen User Guide UG1283 (v2018.2) September 28, 2018 Table of Contents Revision History...............................................................................................................6 Chapter 1: Introduction.............................................................................................. 7 Installing Bootgen.......................................................................................................................8 Boot Time Security.................................................................................................................... 10 Chapter 2: Boot Image Layout............................................................................. 11 Zynq-7000 Device Boot and Configuration............................................................................ 11 Zynq UltraScale + MPSoC Device Boot and Configuration...................................................21 Chapter 3: Creating Boot Images........................................................................ 33 Boot Image Format (BIF)..........................................................................................................33 BIF Syntax and Supported File Types......................................................................................34 Attributes and Descriptions..................................................................................................... 35 Chapter 4: Using Bootgen Interfaces................................................................ 41 Bootgen GUI Options................................................................................................................41 Using Bootgen on the Command Line................................................................................... 43 Commands and Descriptions.................................................................................................. 44 Chapter 5: Boot Time Security...............................................................................46 Using Encryption....................................................................................................................... 47 Using Authentication................................................................................................................ 55 Using HSM Mode.......................................................................................................................65 Chapter 6: FPGA Support.......................................................................................... 81 Encryption and Authentication................................................................................................81 HSM Mode..................................................................................................................................82 Chapter 7: Use Cases and Examples...................................................................85 Simple Application Boot on Different Cores.......................................................................... 85 PMUFW Load by BootROM.......................................................................................................85 PMUFW Load by FSBL............................................................................................................... 86 UG1283 (v2018.2) September 28, 2018Send Feedback www.xilinx.com Bootgen User Guide 2 Booting Linux.............................................................................................................................86 Encryption Flow: BBRAM Red Key........................................................................................... 86 Encryption Flow: Red Key Stored in eFUSE.............................................................................87 Encryption Flow: Black Key Stored in EFUSE ......................................................................... 87 Encryption Flow: Black Key Stored in Boot Header...............................................................88 Encryption Flow: Gray Key Stored in eFUSE........................................................................... 88 Encryption Flow: Gray Key stored in Boot Header................................................................ 89 Operational Key.........................................................................................................................89 Using Op Key to Protect the Device Key in a Development Environment..........................89 Authentication Flow.................................................................................................................. 90 BIF File with SHA-3 eFUSE RSA Authentication and PPK0.....................................................90 XIP............................................................................................................................................... 90 Appendix A: BIF Attribute Reference................................................................ 91 aeskeyfile....................................................................................................................................91 alignment................................................................................................................................... 92 auth_params.............................................................................................................................. 92 authentication........................................................................................................................... 94 bh_keyfile....................................................................................................................................95 bh_key_iv.....................................................................................................................................95 bhsignature................................................................................................................................96 blocks..........................................................................................................................................97 boot_device................................................................................................................................ 97 bootimage..................................................................................................................................98 bootloader..................................................................................................................................99 bootvectors.............................................................................................................................. 100 checksum................................................................................................................................. 100 destination_cpu....................................................................................................................... 101 destination_device...................................................................................................................102 early_handoff........................................................................................................................... 103 encryption................................................................................................................................ 103 exception_level........................................................................................................................ 104 familykey.................................................................................................................................. 105 fsbl_config................................................................................................................................ 105 headersignature......................................................................................................................106 hivec..........................................................................................................................................107 init............................................................................................................................................. 107 keysrc_encryption....................................................................................................................108 UG1283 (v2018.2) September 28, 2018Send Feedback www.xilinx.com Bootgen User Guide 3 load........................................................................................................................................... 109 offset.........................................................................................................................................109 partition_owner....................................................................................................................... 110 pid............................................................................................................................................. 110 pmufw_image.......................................................................................................................... 111 ppkfile....................................................................................................................................... 111 presign......................................................................................................................................112 pskfile........................................................................................................................................113