Page 1 of 1

Can't enable Secure Boot v2 and Flash Encryption

Posted: Mon Nov 06, 2023 9:39 am
by cherep
I am using ESP32 and IDF 5.1.1 trying to enable Secure Boot v2 and Flash encryption. When I try to flash the new bootloader and app I get a checksum error. (note: I am flashing it with JLink and OpenOCD, but I have configured JTAG debugging to be enabled)

rst:0x3 (SW_RESET),boot:0x13 (SPI_FAST_FLASH_BOOT)
configsip: 0, SPIWP:0xee
clk_drv:0x00,q_drv:0x00,d_drv:0x00,cs0_drv:0x00,hd_drv:0x00,wp_drv:0x00
mode:DIO, clock div:2
load:0x3fff00b8,len:13308
ho 0 tail 12 room 4
load:0x40078000,len:25000
ho 0 tail 12 room 4
load:0x40080400,len:4
load:0x40080404,len:3804
csum err:0x42!=0xd2 ets_main.c 384

After that it keeps rebooting due to a watchdog reset.

I have changed the partition table offset from 0x8000 to 0xD000 since the size of my bootloader is 48k now. Anyone had a similar issue?

Re: Can't enable Secure Boot v2 and Flash Encryption

Posted: Wed Nov 08, 2023 12:38 pm
by ESP_rrtandler
Hi @cherep,

Please check the documentation, especially the part dealing with OpenOCD + JTAG & Secure Boot coexistence
https://docs.espressif.com/projects/esp ... y-features
for any unwanted side effects. If possible, try to flash using serial flasher to see whether the JTAG flashing may have caused the trouble.