Why do I get an error when trying the BKPS provisioning flow commads on my Agilex® 5 FPGA device?

Description

Due to a problem in Quartus® Prime Pro Edition 26.1.1, the Quartus Programmer may load the incorrect SDM Firmware when executing the BKPS provisioning flow commands shown below on Agilex® 5 FPGA devices enabled for Post-Quantum Cryptography (PQC) secure boot.

quartus_pgm -c 1 -m jtag --bkp_options=bkp_options.txt [--bkp_prefetch] [--bkp_puf_activate] [--bkp_set_authority] 

The incorrect Firmware is loaded at the start of the commad operation and causes it to fail.

Resolution

Using the Quartus Programmer, manually generate and preload the correct Agilex® 5 SDM firmware for your specific OPN variant before executing the BKPS commands, as shown below.

quartus_pfg --helper_image -o helper_device=[YOUR_OPN] -o subtype=PROVISION -o pqc_mode=OFF provision_pq_cs.rbf 
quartus_pgm -c 1 -m jtag -o "p;provision_pq_cs.rbf" 
quartus_pgm -c 1 -m jtag --cmd_code=0x1180 --cmd_param=0xF 
quartus_pgm -c 1 -m jtag -o "p;provision_pq_cs.rbf" 

Then, when executing the BKPS commands, use the --skip_init option to prevent the Quartus Programmer from reloading the incorrect Agilex® 5 SDM firmware.

quartus_pgm -c 1 -m jtag --bkp_options=bkp_options.txt --skip_init [--bkp_prefetch] [--bkp_puf_activate] [--bkp_set_authority] 

This issue is scheduled to be fixed in future release of Quartus® Prime Pro Edition Software.