User manual

Table Of Contents
Zynq-7000 AP SoC Technical Reference Manual www.xilinx.com 768
UG585 (v1.11) September 27, 2016
Chapter 32: Device Secure Boot
authentication status of the FSBL and if an authentication error occurs, the BootROM puts the PS into
a secure lockdown state.
Handoff to FSBL
Once the FSBL has been successfully loaded and authenticated, control is turned over to the
decrypted FSBL which now resides in the OCM. Based on the user application, the FSBL could then
start processing, configure the PL, load additional software, or wait for further instruction from an
external source.
X-Ref Target - Figure 32-2
Figure 32-2: PS Boot Flow
Power On Reset
(Debug access with JTAG disabled)
Internal memory hardware clean process
(Optional OCM ROM CRC)
Load boot image header
AES decryption of FSBL
(Decrypted FSBL loaded to internal RAM)
Secure boot Non-secure boot
UG585_c33_02_052913
HMAC authentication of FSBL
Disable OCM ROM memory
Pass control to FSBL
Disable and LOCK all security features
(AES and HMAC)
Load FSBL into internal RAM
or external DDR memory
Disable OCM ROM memory
Enable JTAG
Pass Control to FSBL
RSA authentication performed on FSBL
RSA enabled