openmv/tools/alif/utils/cfg/OEMSBKey2.cfg
2024-08-28 20:06:14 +02:00

36 lines
1.9 KiB
INI
Executable File

# This configuration file is for the offline key certificate tool cert_key_util.py (Key Certificate Generation Tool - KCGT).
#
# The available parameters in this configuration file are the following
# • [KEY-CFG] : Mandatory header.
# The internal non-configurable header.
# • cert-keypair : Mandatory parameter.
# The file holding the RSA keypair for signing this certificate, in PEM format.
# • cert-keypair-pwd : Optional. If omitted the tool prompts for direct input.
# The passphrase file for the keypair file, in .txt format.
# • hbk-id : Mandatory parameter. The tool is agnostic to the certificate usage, this parameter cannot be omitted.
# The ID of the Hbk field in OTP memory that the public key of this certificate is verified against:
# - 0: 128-bit Hbk0.
# - 1: 128-bit Hbk1.
# - 2: 256-bit Hbk.
# The ROM code uses this field only if this certificate is the first certificate in:
# - A two-level SB certificate chain.
# - A three-level SB certificate chain.
# - A three-level Secure Debug chain.
# • nvcounter-val : Mandatory parameter.
# The NV counter value:
# - 0..64: the ICV counter.
# - 0..96: the OEM counter.
# - 0..160: the full counter, if OEM and ICV are a single entity.
# The passphrase file for the keypair file, in .txt format.
# • next-cert-pubkey : Mandatory parameter.
# The file holding the RSA public key for signing the next certificate in the chain, in PEM format.
# • cert-pkg : Mandatory parameter.
# The key certificate package output file.
[KEY-CFG]
cert-keypair = utils/key/OEMSBKey.pem
cert-keypair-pwd = utils/key/oem_keys_pass.pwd
hbk-id = 1
nvcounter-val = 0
next-cert-pubkey = utils/key/OEMSBContentPublic.pem
cert-pkg = cert/OEMSBKey2.crt