MAX10 RSU upgrade succeeds, but device boots Factory image instead of Application

Hello,

I’m using Intel MAX10 Remote System Upgrade (RSU) with:

• CFM0 = Factory
• CFM1 = Application

The firmware‑triggered RSU upgrade completes successfully, but after reconfiguration the device boots back into the Factory image instead of the Application image.

Below is the design setup:

• RSU IP instantiated and connected over SPI
• Avalon‑MM master interface of RSU IP is exported to user logic
• onchip_flash data interface is also exported and visible in the top level
• Firmware performs erase/write/verify through the exported Avalon‑MM interface
• Autoboot decision is based on a bit stored in UFM, read at startup

No external power cycle occurs during RSU (warm reconfiguration).

Below are the observations:

• RSU programming via firmware completes without errors
• MAX10 reconfigures after RSU
• Cold boot works correctly
• Programming the App image via JTAG works
• Issue occurs only after warm RSU (no power cycle)

Autoboot selection is controlled via a bit stored in UFM. For this I have exported the AV-MM 

I have the below questions:

1. Is it expected that RSU does not automatically re‑enter autoboot logic?
2. After warm RSU, must user RTL explicitly regenerate a boot / autoboot event?
3. Are there recommended MAX10 reference patterns for autoboot handling after RSU?

Thanks for any guidance or references.