5.2.3 Cipher and Sign the Bootstrap Image

The final step is to cipher and sign the boot image. To accomplish this, use the sam_genimage.py tool from the Secure SAM-BA® Cipher suite, with the following command:

sam_genimage.py --config customer_key.yaml bootstrap.bin bootstrap.cip

Where customer_key.yaml is the same yaml file containing the customer’s keys as the one used to generate the customer key payload.

The output image, bootstrap.cip, can be written to any configured boot non-volatile Flash memory using SAM-BA tools.