SPMU447 June 2026
To trigger a Secondary Secure Bootloader Update, follow these steps:
Set the address in which the update image is located by calling HapiSbSetUpdateImageAddress( address )
Call HapiSbSetId( 3 )
Reset the device
When the system is being provisioned for the first time, the target image can be programmed directly to the slot in which it will be executed.
Secondary Secure Bootloader images must be signed with the key that corresponds to the SSB active key in the Key Ring.
Refer to the Secure Boot SDK example for instructions on how to create Secondary Secure Bootloader update images.