diff --git a/source/images/Auth_default_bootflow_AM62L.png b/source/images/Auth_default_bootflow_AM62L.png new file mode 100644 index 000000000..488e1ef3b Binary files /dev/null and b/source/images/Auth_default_bootflow_AM62L.png differ diff --git a/source/images/Auth_secure_bootflow_AM62L.png b/source/images/Auth_secure_bootflow_AM62L.png new file mode 100644 index 000000000..88206855c Binary files /dev/null and b/source/images/Auth_secure_bootflow_AM62L.png differ diff --git a/source/linux/Foundational_Components/System_Security/Auth_boot.rst b/source/linux/Foundational_Components/System_Security/Auth_boot.rst index 6e02a8f8d..f8026db8d 100644 --- a/source/linux/Foundational_Components/System_Security/Auth_boot.rst +++ b/source/linux/Foundational_Components/System_Security/Auth_boot.rst @@ -71,12 +71,16 @@ Before encrypting a drive, it is recommended to perform a secure erase by overwr Setup ***** -.. Image:: /images/Auth_default_bootflow.png - :align: center +.. ifconfig:: CONFIG_part_variant not in ('AM62LX') -.. note:: + .. Image:: /images/Auth_default_bootflow.png + :align: center + +.. ifconfig:: CONFIG_part_variant in ('AM62LX') + + .. Image:: /images/Auth_default_bootflow_AM62L.png + :align: center - A new Yocto layer is in the works to automate all of the below steps The following steps describe how to build user-space tools and configuration on Yocto. Please use :ref:`Processor SDK - Building the SDK with Yocto ` as reference. @@ -240,14 +244,21 @@ The following steps describe how to build user-space tools and configuration on #. Repackage the initramfs into the kernel, build and replace the :file:`root/boot/Image` and boot. -.. Image:: /images/Auth_secure_bootflow.png - :align: center +.. ifconfig:: CONFIG_part_variant not in ('AM62LX') + + .. Image:: /images/Auth_secure_bootflow.png + :align: center + +.. ifconfig:: CONFIG_part_variant in ('AM62LX') + + .. Image:: /images/Auth_secure_bootflow_AM62L.png + :align: center ********** Next steps ********** -This guide showcases the authenticated boot flow on TI devices and is not meant to be directly used in production. The demo utilizes a pass_key to secure the encrypted partition and is placed in the initramfs in a non-secure manner. +This guide showcases the authenticated boot flow on TI devices and is not meant to be directly used in production. The demo utilizes a pass_key to secure the encrypted partition and is placed in the initramfs in a non-secure manner. Refer :ref:`File System Encryption with fTPM ` for details on using fTPM based key sealing and secure storage of keys. ******** See Also