Nvidia MSTFLINT Manual page 73

Tool Flow
Set GUIDs
Verify
Set DV INFO: SET
MFG, SET VSD, VPD
ROM OPS: BROM,
DROM
"-ocr" override
cache replacement
(Direct flash GW
access)
HW SET (Set flash
parameters)
"--
no_fw_ctrl" (Legacy
Flow)
Read
mstm
Write
cra
mstre Read
gdum
p
mstco working
nfig
mstfw working
reset
The following sections describe how Secure FW updates are performed.
Signing Binary Image Files
For firmware Secure purposes, you may sign the image file using the sign command. If you do not
provide the sign command with a private key and UUID, the command will only compute SHA256 digest
and add it to the image signature section. The sign command supports RSA keys with lengths of 2048
and 4096 bits.
• If you provide a private key with the length of 2048 bits, the command will compute
SHA256 digest and encrypt it with the private key and add the result with the provided
UUID to the appropriate image signature section.
Secure FW
Working with controlled fw
update
Working partially (BOOT
image)
Not supported in Secure
FW
Not supported, BOOT
image modification is not
supported (MFBA)
Not supported in Secure
FW
Flash GW is blocked
Not supported in Secure
FW
working
Read Only CR- Space
working
working
working
With CS Token
Working with controlled fw
update
Working partially (BOOT
image)
Not supported in Secure
FW
Not supported, BOOT
image modification is not
supported (MFBA)
Not supported in Secure
FW
Flash GW is blocked
Not supported in Secure
FW
working
working
working
working
working
Blocked
Command
s
MFBA
MFBA
Flash GW is
blocked
Flash GW is
blocked
MFBA
working
Read Only
CR- Space
working
working
working
73