Forum Discussion

torstein18's avatar
torstein18
Icon for Occasional Contributor rankOccasional Contributor
21 days ago

Store custom keys on SDM Agilex3

Hi I know it's possible to store encryption and siging keys on the SDM for fpga firmware decryption and authentication, but is it possible to store my own keys on it? I will use the key to decr...
Arm Processor
embedded peripheral
Sw Development
SueC_Altera's avatar
SueC_Altera
Icon for Contributor rankContributor
20 days ago

Hi torstein18,

Do you have an NDA with Altera? The Agilex 3 Device Security User Guide tells you how to do this, but it is a restricted document, so you have to have an NDA and be signed into MyAltera to get access.

Sue

  • torstein18's avatar
    torstein18
    Icon for Occasional Contributor rankOccasional Contributor
    20 days ago

    Ok, I will check it out when I get an NDA

  • torstein18's avatar
    torstein18
    Icon for Occasional Contributor rankOccasional Contributor
    15 days ago

    I have read trough the documentation, but I still don't understand how I can send commands to the SDM from linux running on the HPS. Do I need to install any drivers or do some changes to the device tree. Here is the device tree node I have for the SDM:

    firmware {
		svc {
			compatible = "intel,agilex5-svc";
			method = "smc";
			memory-region = <&service_reserved>;
			iommus = <&smmu 10>;
			interrupts = <GIC_SPI 0 IRQ_TYPE_LEVEL_HIGH>;
			interrupt-parent = <&intc>;
			altr,smmu_enable_quirk;

			fpga_mgr: fpga-mgr {
				compatible = "intel,agilex5-soc-fpga-mgr";
				altr,smmu_enable_quirk;
			};

			temp_volt: hwmon {
				compatible = "intel,soc64-hwmon";
			};

			fcs_config: fcs-config {
				compatible = "intel,agilex5-soc-fcs-config";
			};
		};
	};

    I have installed the FCS driver:

    root@agilex3:~# zcat /proc/config.gz | grep FCS
CONFIG_ALTERA_SOCFPGA_FCS_DEBUG=y
CONFIG_CRYPTO_DEV_INTEL_FCS=y

    Is there any other drivers I need?