Hey there,
I'm looking for help to let me enable Secure boot on Raspberry Pi 5.
I'm trying to enable Secure boot on my RPi 5 device using the following manuals:
- How To Use Raspberry Pi Secure Boot (Boot-Security-Howto.pdf)
- https://github.com/raspberrypi/usbboot/ ... /Readme.md
- https://github.com/raspberrypi/usbboot/ ... /README.md
There are steps I done to enable Secure Boot on my device:I see the last message and nothing happens.
I'm connecting my Raspberry Pi 5 board from Linux laptop with compiled rpiboot binary with USB-A to USB-C cable.
On the Raspberry Pi 5 side, I tried plugging in all four USB ports one by one, even those labeled USB3 (blue ports).
Also, before connecting I did the following with my Raspberry Pi 5 board to disable EEPROM Write Protection (troubleshooting tips from https://rpltd.co/rpiboot):
I'm looking for help to let me enable Secure boot on Raspberry Pi 5.
I'm trying to enable Secure boot on my RPi 5 device using the following manuals:
- How To Use Raspberry Pi Secure Boot (Boot-Security-Howto.pdf)
- https://github.com/raspberrypi/usbboot/ ... /Readme.md
- https://github.com/raspberrypi/usbboot/ ... /README.md
There are steps I done to enable Secure Boot on my device:
Code:
$ openssl genrsa 2048 > private.pem$ openssl rsa -in private.pem -out public.pem -pubout -outform PEM$ sudo apt install git libusb-1.0-0-dev pkg-config build-essential$ git clone --recurse-submodules --shallow-submodules --depth=1 https://github.com/raspberrypi/usbboot$ cd usbboot$ makecc -Wall -Wextra -g -o rpiboot main.c bootfiles.c decode_duid.c `pkg-config --cflags --libs libusb-1.0` -DGIT_VER="\"62f37dae\"" -DPKG_VER="\"20240422~085300\"" -DINSTALL_PREFIX=\"/usr\"$ ls rpibootrpiboot$ cd secure-boot-recovery5$ sudo apt install xxd python3-pycryptodome$ pwd/home/user/secure_boot/usbboot/secure-boot-recovery5$ sudo echo 'SIGNED_BOOT=1' >> boot.conf$ sudo ../tools/update-pieeprom.sh -f -k /home/user/secure_boot/private.pemSIGN_RECOVERY: 0Using unsigned recovery.bin'recovery.original.bin' -> 'bootcode5.bin'Signing pieeprom.original.bin as pieeprom.signed_boot.binSigning bootloader configf9367819cc519f49523b9d1ab53c77abb9e19bd7452bca799f847a44519ae90ats: 1734430798rsa2048: 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 rpi-eeprom-config --config boot.conf --out pieeprom.bin -d /tmp/tmp.EErBN4cdke -p /home/user/secure_boot/private.pem pieeprom.signed_boot.bin+ set +xnew-image: pieeprom.binsource-image: pieeprom.signed_boot.binconfig: boot.conf$ sudo ../rpiboot -d .RPIBOOT: build-date Dec 13 2024 version 20240422~085300 62f37daeIf the device fails to connect then please see https://rpltd.co/rpiboot for debugging tips.Loading: ./bootcode5.binWaiting for BCM2835/6/7/2711/2712...I'm connecting my Raspberry Pi 5 board from Linux laptop with compiled rpiboot binary with USB-A to USB-C cable.
On the Raspberry Pi 5 side, I tried plugging in all four USB ports one by one, even those labeled USB3 (blue ports).
Also, before connecting I did the following with my Raspberry Pi 5 board to disable EEPROM Write Protection (troubleshooting tips from https://rpltd.co/rpiboot):
Can anyone advice me what I'm doing wrong, probably I have missed something important in the middle of this pipeline?Hardware - Raspberry Pi 5 / Compute Module 5
- Press, and hold the power button before supplying power to the device.
- Release the power button immediately after supplying power to the device.
- Remove any non-essential USB peripherals or HATs.
- Use a USB-3 port capable of supplying at least 900mA and use a high quality USB-C cable OR supply additional power via the 40-pin header.
Statistics: Posted by ptaag — Mon Dec 23, 2024 1:05 pm — Replies 0 — Views 24