bootloader: Enable revoke_devkey in secure-boot recovery.bin

raspberrypi / usbboot

Raspberry Pi USB booting code, moved from tools repository

Apache License 2.0

914 stars 231 forks source link

Closed timg236 closed 2 years ago

timg236 commented 2 years ago

Enable the recovery config.txt options to revoke the ROM development key which permentantely locks the device into secure-boot mode.

WARNING: This also prevents the bootloader from being downgraded to older releases which don't support secure-boot.

timg236 commented 2 years ago

@peterharperuk

timg236 commented 2 years ago

Minor fixup - forgot to update bootcode4.bin in secure-boot-msd.

peterharperuk commented 2 years ago

Ok - makes sense