5 U-Boot Verified Boot

Using Verified Boot requires the following:

1. A special configuration
2. Creating keys and certificates
3. Storing the public key in the U-Boot control DTB
4. Creating a FIT image
5. Signing the FIT image

This application note uses the “signed configuration” methodology of Verified Boot. The FIT file contains two images that are hashed using SHA256, along with a configuration that is hashed using SHA256 and signed using RSA.

Refer to the U-Boot Documentation for details on the Verified Boot process used by U-Boot to ensure that an image is valid and permitted to execute on the platform.