# 启用安全启动

通过熔断一组属于 QFPROM 的硬件熔丝来启用安全启动。根证书的哈希值被熔断到用作主要 RoT 的硬件熔丝中。

请参阅工作流，了解目标外准备和设备端执行。

![../../../../../_images/secure-boot-prep-updated.png](data:image/png;base64,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)

**图：安全启动工作流**

只有在熔断 QFPROM（即 eFuse）后才能保证安全启动。启用平台安全启动所需的 eFuse 配置包括：

- 启用镜像身份验证和防回滚保护。
- 禁用调试和 JTAG 访问。
- 熔断*禁用 QFPROM 区域的读/写权限*熔丝。

## 通过熔断 QFPROM 熔丝启用安全启动

1. 从 Qualcomm 获取唯一的 OEM ID。

    使用代码授权签名服务 (CASS) 或 Qualcomm WES 服务时，需要该 ID。或者，您可以使用 0 作为 OEM ID 的值。
2. 生成和配置签名资产，例如密钥和证书。
3. 生成一个签了名的 ELF (sec.elf)文件用于熔断熔丝。
4. 对固件镜像进行签名。
5. 将 sec.elf 和签名镜像刷写到设备。

非基于 Linux 的镜像使用 SecTools v2 和本地签名程序进行签名。此过程要求签名证书和密钥存在于进行签名的本地计算机上。然而，这些密钥并不安全，在运行 SecTools 的机器上进行签名过程中及之后可能会被公开。

Note

Qualcomm 不提供有关如何保护这些密钥安全的指导。建议遵循标准安全协议，从受信证书颁发机构 (CA) 获取密钥/证书，并使用硬件安全模块 (HSM) 保护这些密钥。

使用 OpenSSL 工具自行生成的密钥和证书没有指向任何证书颁发机构的链接。

## 使用 SecTools 启用安全启动

1. 为 SecTools v2 设置环境变量。有关更多信息，请参阅[安全工具](https://docs.qualcomm.com/doc/80-70022-11SC/topic/tools.html#tools)。

    提供了以下代码片段供参考。根据使用的版本替换 `<chipset>` 和 `<chipset>.LE.X.x`。例如，`<QCM6490.LE.1.0>`。

Note

术语 metabuild、meta 和 meta 路径可互换使用，以指示来自 Qualcomm ChipCode™ 门户的路径。metabuild 表示编译的完整 Qualcomm ChipCode 版本。

    对于 Linux：

> 
> 
> setenv SECTOOLS=/<chipset>.LE.X.x/common/sectoolsv2/ext/linux/sectools
>         Copy to clipboard
> 
> 
> export SECTOOLS=/<chipset>.LE.X.x/common/sectoolsv2/ext/linux/sectools
>         Copy to clipboard
2. 从以下路径使用 SecTools v2：

> 
> 
> `<chipset>.LE.X.x/common/sectoolsv2/ext/<platform>`
> 
>     - `<chipset>_security_profile.xml` 文件在 meta 中位于 `<chipset>.LE.X.x/common/sectoolsv2`
>     - 所需的 SecTools 最低版本为 1.17 或更高。

4. 建议使用硬件安全模块 (HSM)。但是，如果使用 LOCAL（不安全）签名程序，请参见以下文章中中带有 –signing-help 的 LOCAL 签名选项：[SecTools V2: Secure Image User Guide](https://docs.qualcomm.com/bundle/80-NM248-12/resource/80-NM248-12_REV_AB_SecTools_V2__Secure_Image_User_Guide.pdf)。
5. 所有密钥和证书生成命令均使用 OpenSSL 1.1.1g（2020 年 4 月 21 日）运行。这是安装 OpenSSL 的先决条件。
6. 确保在未配置 RPMB 的设备上启用安全启动。请参阅[检查 RPMB 配置状态](https://docs.qualcomm.com/doc/80-70022-11SC/topic/bring-up.html#section-bringup-check-rpmb-provision-status-label)。

    在安全启动熔丝熔断后，RPMB 将自动预配生产密钥。

Note

*SecTools* 指南可供具有授权访问权限的许可用户使用。

## 后续步骤

- 要启用安全启动，必须​熔断 QFPROM 熔丝。这是一个一次性、不可逆的过程，可永久设置这些值。如需了解更多信息，请参阅[设置 QFPROM 熔丝](https://docs.qualcomm.com/doc/80-70022-11SC/topic/appendix-fuse-configurations.html#appendix-fuse-configurations)。
- 为确保在安全可信的环境中生成和管理加密密钥和证书，请参阅[生成密钥和证书](https://docs.qualcomm.com/doc/80-70022-11SC/topic/generate-keys-and-certificates.html#generate-key-and-certificate)。

Last Published: Apr 14, 2026

[Previous Topic
从 Qualcomm TEE 启用设备配置 (Devcfg)](https://docs.qualcomm.com/bundle/publicresource/80-70022-11SC/topics/enable-device-devcfg-from-qtee.md) [Next Topic
设置 QFPROM 熔丝](https://docs.qualcomm.com/bundle/publicresource/80-70022-11SC/topics/appendix-fuse-configurations.md)