Buildroot:
1.	Enable MA35D1 Secure Boot and enter the key you want:
	`$ make menuconfig`
	`Bootloaders ---> [*] MA35D1 Secure Boot () AES Key () ECDSA Key`
2.	Rebuild the Image:
	`$ make`
3.	The `otp_key.json` will be generated in the folder below:
	`/buildroot/output/images/nuwriter/otp_key.json`
4.	Write the three keys to MA35D1 OTP by NuWriter: `publicx`, `publicy`, `aeskey`
5.	Program the Image to the target board.
6.	Remember to switch PG0 ON to enable secure boot.

Yocto:
1.	Edit the target board configuration:
	`$ vim ~/yocto/source/meta-ma35d1/conf/machine/numaker-som-ma35d1681.conf`
	`... AES_KEY = " " ECDSA_KEY = " " ...`
2.	Rebuild the Image:
	`$ bitbake nvt-image-qt5`
3.	The `otp_key_sdcard.json` will be generated in the folder below:
	`~/shared/yocto/build/tmp-glibc/deploy/images/numaker-som-ma35d16a81/nuwriter/otp_key_sdcard.json`
4.	Write the three keys to MA35D1 OTP by NuWriter: `publicx`, `publicy`, `aeskey`
5.	Program the Image to the target board.
6.	Remember to switch PG0 ON to enable secure boot.

Products:	Microprocessors ,Arm Cortex-A35 MPUs
Applications:
Function:	Others,Boot source,Secure

FAQ

Build and enable secure boot image Issue Date：2025-03-03