Sign Custom Firmware with SDK_1.1.18.2

Good morning,

I am facing difficulties generating custom firmware using SDK_1.1.18.2_rc7. I have configured the SDK according to the instructions in the BHy2xx/BHI3xx Programmer’s Manual and the BHI360/380 SDK Quick Start Guide (I am using ARC_GNU_IDE 2024.12), but I am experiencing issues signing the firmware as per section 9.2.2 – Secure Boot Mode (BHI360 Datasheet pg 45).

 I am using Windows 11 - 64-bit in a virtual machine through Parallels.

Currently, I am modifying the file config.7189_di03_rtos_bhi360.cmake with the following parameters:

 IF(BUILDING_SDK)
# Available security types: SIGNED_ALL, SIGNED_UNSIGNED, UNSIGNED_ALL
    SET(SECURITY_TYPE SIGNED_ALL)
# Available signing methods: SIGN_LOCAL, SIGN_SERVER
SET(SIGN_METHOD SIGN_LOCAL)
ELSE()
SET(SECURITY_TYPE SIGNED_ALL)
    SET(SIGN_METHOD SIGN_LOCAL)
ENDIF()

However, during compilation, I receive the following error:

[267/299] Generating Bosch_Shuttle3_BHI360_polling_step_counter.elf

FAILED: user/Bosch_Shuttle3_BHI360_polling_step_counter.elf

...

Error signing firmware Bosch_Shuttle3_BHI360_polling_step_counter.fw.tmp: error=18: Invalid signature

When I change the parameters to:

IF(BUILDING_SDK)
SET(SECURITY_TYPE SIGNED_UNSIGNED)
    SET(SIGN_METHOD SIGN_LOCAL)
ELSE()
    SET(SECURITY_TYPE SIGNED_UNSIGNED)
    SET(SIGN_METHOD SIGN_LOCAL)
ENDIF()

The firmware is generated successfully; however, the resulting image is not signed. When I try to upload the firmware to the device, the bootloader rejects the image with the following message:

E (26683) BHY2: Sensor error: [Sensor error] Bootloader reports: Firmware Upload Failed: Signed Firmware Required

My questions are:

1. How can I correctly sign my custom firmware?

2. Is it possible to perform this signing in a Windows environment?

    2.1 If so, can I use a Windows virtual machine?

3. Does the SDK_1.1.18.2_rc7 include the necessary certificates to generate a properly signed secure firmware?

    3.1 If not, can Bosch please provide the required certificates?

4. Is any specific software required to generate the keys that sign the custom Firmware?

Thank you for your attention, and I look forward to your guidance.

Sincerely,

2 replies