2.1 Secure Boot Mode: AES-RSA X.509 Certificate Serial Number Length Limit
According to the standard RFC 5280 "Internet X.509 Public Key Infrastructure Certificate" section 4.1.2.2, the maximum length for serial numbers in X.509 certificates is 20 bytes.
When parsing the certificate chain in AES-RSA Secure Boot mode, the maximum serial number length allowed by the ROM code is 16 bytes.
Work Around
To use AES-RSA Secure Boot mode, do not use X.509 certificates with a serial number length higher than 16 bytes.
Affected Silicon Revisions
| A0 | A1 | ||||||
| X | X |