Forum Discussion

torstein18's avatar
torstein18
Icon for Occasional Contributor rankOccasional Contributor
21 days ago

Store custom keys on SDM Agilex3

Hi I know it's possible to store encryption and siging keys on the SDM for fpga firmware decryption and authentication, but is it possible to store my own keys on it? I will use the key to decr...
Arm Processor
embedded peripheral
Sw Development
    • torstein18's avatar
      torstein18
      Icon for Occasional Contributor rankOccasional Contributor
      12 days ago

      It is the link to the hardware design inside the tutorial I need (GHRD), for quartus 26.1.1 and this devkit  DK-A5E013BM16AEA: Agilex® 5 FPGA E-Series 013B Development Kit

    • torstein18's avatar
      torstein18
      Icon for Occasional Contributor rankOccasional Contributor
      12 days ago

      When I try to program the certificate to the SDM I get this error:

      quartus_pgm -c 2 -m jtag -o "p;signed_prov_srk.ccert"
Info: *******************************************************************
Info: Running Quartus Prime Programmer
    Info: Version 26.1.1 Build 130 08/06/2026 SC Pro Edition
    Info: Copyright (C) 2026  Altera Corporation. All rights reserved.
    Info: Your use of Altera Corporation's design tools, logic functions
    Info: and other software and tools, and any partner logic
    Info: functions, and any output files from any of the foregoing
    Info: (including device programming or simulation files), and any
    Info: associated documentation or information are expressly subject
    Info: to the terms and conditions of the Altera Program License
    Info: Subscription Agreement, the Altera Quartus Prime License Agreement,
    Info: the Altera IP License Agreement, or other applicable license
    Info: agreement, including, without limitation, that your use is for
    Info: the sole purpose of programming logic devices manufactured by
    Info: Altera and sold by Altera or its authorized distributors.  Please
    Info: refer to the Altera Software License Subscription Agreements
    Info: on the Quartus Prime software download page.
    Info: Processing started: Thu Oct  1 10:37:03 2026
    Info: System process ID: 532113
Info: Command: quartus_pgm -c 2 -m jtag -o p;signed_prov_srk.ccert
Info (213045): Using programming cable "USB-Blaster [1-1]"
Info (209060): Started Programmer operation at Thu Oct  1 10:37:04 2026
Info (19096): Programming compact certificate at device index 1
Error (19117): Programming failed on device index 1. The certificate is invalid or the device does not support the certificate. (Error Code 0x80). The certificate is invalid. (Process Status 0xF00000FF)
Error (209012): Operation failed
Info (209061): Ended Programmer operation at Thu Oct  1 10:37:04 2026
Error: Quartus Prime Programmer was unsuccessful. 2 errors, 0 warnings
    Error: Peak virtual memory: 626 megabytes
    Error: Processing ended: Thu Oct  1 10:37:04 2026
    Error: Elapsed time: 00:00:01
    Error: System process ID: 532113

       

      • torstein18's avatar
        torstein18
        Icon for Occasional Contributor rankOccasional Contributor
        12 days ago
        I had to change the command from:
quartus_pfg --ccert -o ccert_type=PROV_SERVICE_ROOT_KEY -o ccert_device=A3CW135BM16AE6S certificated/unsigned_prov_srk.ccert

To this:
quartus_pfg --ccert -o ccert_type=PROV_SERVICE_ROOT_KEY_UDS_EFUSE -o ccert_device=A3CW135BM16AE6S -o non_volatile=OFF certificates/unsigned_prov_srk.ccert

Then I was able to program the certificate on an Agilex3 device