Secure Boot Chain on Zynq-7000

Boot loader to kernel signature verification, with key provisioning steps.

Requested by Mara OkaforEmbedded PlatformsContact requesterRequested 3 Sep 2026Updated 3 Sep 2026

Wanted. Nobody has built this example yet. Mara Okafor asked for it; contact them if you have something close.

What is needed#

Our fielded boards verify update bundles but not the boot chain itself. We need an example that signs and verifies each stage from the boot ROM to the kernel on a development board, including how keys are generated, provisioned and retired.

Technologies & features#

Technologies
Zynq-7000
Features
Linux Image BuildCode Signing
Topics
Embedded/LinuxprimarySoftware Integrity

Contributes to

StatusWanted
Requested byMara Okafor
TeamEmbedded Platforms
Slugsecure-boot-zynq