It appears that mkpkc is failing with error "Error: Session ID check failed.’ How do I overcome this error? How do I proceed, or is this only supported under Ubuntu 14.04LTS (which has gone EOL)?
BTW, I have enabled the “-x” flag argument in bash to capture the sequence of commands, but every time I try to post to the forum with its output I get a “Security Error” !?!
did you encounter same failure by removing the “FAB=C04” option ?
please try again with standard Jetson TX2 fuse command, you’ll need an actual target device connected to the host and placed in force recovery mode.
also, please share whole odmfuse messages for us checking.
thanks
Okay, I was able to find some cycles and return to this. Via a little debugging, I determined that mkpkc calls “/bin/sh -c ‘who am i’”. I found that within terminal of my 14.04 system I would get the expected output. If I ran that command from within a bash shell within emacs, I would get no output! And if I ran that command from within terminal of my 16.04 system I would also get no output.
In summary:
"/bin/sh -c 'who am i'" + Ubuntu 14.04 + 'terminal' == GOOD
"/bin/sh -c 'who am i'" + Ubuntu 14.04 + 'emacs shell' == BAD
"/bin/sh -c 'who am i'" + Ubuntu 16.04 + 'terminal' == BAD
I also checked ‘whoami’ and ‘who’ without any arguments and all worked as expected in all cases. If you google around, you will also find that others have reported ‘who am i’ to return without any output. I suggest changing ‘mkpkc’ and any other NVIDIA apps / scripts to not use it.
Oh, and one last thing I did… I modified the mkpkc app to change it to call ‘who’ instead of ‘who am i’ and that seemed to make things work. For the r28.2 binaries I changed mkpkc offset 0x5F36b from 0x20 to 0x00 and then odmfuse.sh behaved as it should.
FYI, we had fixes integrate to our code-line,
please expect next public release (i.e. l4t-r28.3) fix the issue that “who am i” returns failures with ubuntu.
thanks
it’s correct that there’s no public release secureboot files for r28.3,
please download the attachment and update below two files for testing, thanks
Linux_for_Tegra/odmfuse.sh
Linux_for_Tegra/pkc/mkpkc Topic1033753_Apr23_secureboot.tar.gz (316 KB)
I tried to use L4T 32.1.0 with this package. Ran into a couple of issues:
1.There was a renaming of the SCEFILE which caused the odmfuse.sh to fail. I modified the name of the SCEFILE to match the name in L4T 32.1.0 and got that script to work.
Need updated odmsign.func
I got error (./flash.sh: line 2316: odmsign_ext: command not found) while trying to create the signed and encrypted binary images. Could you please provide this?
you should stay on r28.3 and apply the update in comment #12 for testing.
if you would like to upgrade to r32.1, please wait another public release secureboot package for it.
also, since this discussion thread is based-on rel-28, please initial another new topic for rel-32 issue.
thanks
We are investigating what it will take to move our TX2 based product from L4T28.x to L4T 32.x (i.e. new kernel version, transition from ubuntu 16.04 to 18.04 etc.). Can you share any details of when the secure boot tools for L4T 32.x will be publicly available?