Forum Discussion
Occasional ContributorMAX10 RSU with encrypted .pof
I have a design that relies on RSU for remote updates. I currently encrypt the .pof file for JTAG programming. When generating that encrypted .pof file, I also choose to generate the .rpd files that go into CFM1. When downloading the .rpd files with the encrypted .pof and .ekp programmed via JTAG, the RSU is unsuccessful. I see a revert to application image 0, which my design will only go to if there is a problem with application image 1. The encrypted .pof file does not seem to like downloading a n.rpd file.
Is there any way to get an .rpd file to download with an encrypted .pof
24 Replies
FakhrulA_alteraRegular Contributor
Hi rt52,
I wish to follow up with you on this case. Do you still have further inquiries on this issue? Please feel free to let me know if there is any concern so that we could further assist you. Otherwise, this thread will be idling and marked as inactive, thus it will be transitioned to community support because there is no update received from you in a while. As for the workaround regarding this issue, my apologies, the above-mentioned steps are the only workaround provided by the engineering team.
Regards,
Fakhrul
- FakhrulA_altera
Hi rt52,
There was a successful case whereby the encrypted configuration would succeed only by using .jbc file instead of .pof and also enabling the real-time ISP at the same time as mentioned above. But, this customer was using a jam player and it not involving RSU. You may give it a try. I hope it would work. Sorry for the inconvenience.
Regards,
Fakhrul
- FakhrulA_altera
Hi rt52,
My apologies I mixed up my explanation earlier, the above mentioned workaround was meant for the stratix 10 device, not Max 10. Also. MAX10, it actually has a built-in configuration memory and doesn't support JIC. What I can only suggest for now, try to check the “Enable real-time ISP” option in the programmer GUI. There's a case whereby the customer was able to perform configuration on an encrypted file (not RSU). Though, it is because when you enable this real-time ISP, it is a slow mode and normally user will not have this issue if program without speedmode (real-time ISP enabled) but the programming time is longer.
Regards,
Fakhrul
rt52I do not see how this will help. My issue is not programming an encrypted .pof with jtag, that works just fine without checking that box. Is there anything else to try when downloading an encrypted .rpd file? This device will have jtag disabled when shipped so having an update over jtag is not an option.
- FakhrulA_altera
Hi rt52,
I wish to follow up with you about this case.
Do you still have further inquiries on this issue?
Else I would like to have your permission to close this forum ticket
Regards,
Fakhrul
- rt52
Thanks for looking into this. Unfortunately this design does not have a QSPI chip and only uses the internal flash of the MAX10, is it possible to use the .jic format to program to the internal flash?
- FakhrulA_altera
Hi rt52,
I tried to do some research on this issue. I found a record that previously there was an issue with MAX 10 having a failure on performing RSU with encrypted POF. The engineering was able to come up with a workaround by using JTAG to program encrypted .jic to QSPI instead. You may refer to the guideline under 1.7.2. Programming the QSPI sub-topic in the AN 741: Remote System Upgrade for MAX 10 FPGA Devices over UART with the Nios II Processor user guide. I'm afraid this is the only possible workaround provided by the engineering team since MAX 10 is quite an old device. Hope it works.
Regards,
Fakhrul
- FakhrulA_altera
Hi rt52,
My apologies. I'm still waiting for a response from the internal expert.
Let me follow up again with them and will get back to you.
Regards,
Fakhrul
- FakhrulA_altera
Hi rt52,
We are consulting engineering on this request. I'm planning to get back to you once I receive the update.
Sorry for the inconvenience caused.
Regards,
Fakhrul
- FakhrulA_altera
Hi rt52,
Just want to check whether you have tried the 3.8.3.2. Integrate the .ekp into .pof Programming (Page 55) when programming the FPGA with Initial Image using JTAG using the Programmer window?
Also, please check the Configuration Image Outcome Based on Encryption Settings (Page 56) from the same document as the Encryption Settings may affect the result for this process.
Regards,
Fakhrul
- rt52
I am using Quartus 21.1 but I can try the latest version.
Yes, I have been using 3.8.3.2 o on the document you linked to do all the programming so far. I tried 3.8.3.1 but my device would not boot.
I select the encrypted .pof image, right click and add the .ekp file generated in the same step, and also select an .ips file. I am not sure if the .ips file affects this but the .pof programming will fail without using an .ips file. This is done with an EtherBlaster. I can try a USB blaster but that should not make a difference.
If I am reading that table right, both images are encrypted with key x, and key x is loaded while programming. Config_sel pin is set to 1 so the device should boot into image 1, which it does without encryption
- FakhrulA_altera
Hi rt52,
Sorry for the delay in response. I couldn't replicate your issue on my end. What version of Quartus you're using and cand you try to use the latest version?
Regards,
Fakhrul
- FakhrulA_altera
Hi rt52,
Sorry for the delay in response. From your flow, nothing sounds out of the ordinary to me.
- May I know if this is a singular case or are you seeing the same issue in other new devices?
- Can you consistently replicate this issue?
- Can you try to perform a full chip erase and see if the issue still persists?
Please let me know if this works for you. Thank you.
Regards,
Fakhrul
- rt52
1. This issue follows other boards, although they are all the same board design.
2. Yes this issue will always happen. Downloading the .rpd will work and boot into the application image every time without encryption but will not work when trying with encryption.
3. Full chip erase does not help the issue
