Secure Boot on Genio510/700

Yocto
, ,
1

We are trying to enable Secure Boot on our Genio700/510 based module.
We started with MediaTek’s Genio700-EVK board and building default IoT Yocto image and following the guide Secure Boot — IoT Yocto documentation

What we did according to the guide, appended the following to the local.conf

DISTRO_FEATURES:append = " secure-boot"
BL2_SIGN_ENABLE = “1”
DA_SIGN_ENABLE = “1”
UBOOT_SIGN_KEYNAME=“u-boot”
UBOOT_SIGN_IMG_KEYNAME=“u-boot-img”

SECURE_ZIP_ENABLE = “1”

Getting the error in do_image_secure task:
…
rm: cannot remove ‘rity-demo-image-genio-700-evk.rootfs-20260319194915.secure’: No such file or directory
WARNING: … exit 1 from ‘rm rity-demo-image-genio-700-evk.rootfs-20260319194915.secure’
…

I enabled the NDA Build as per guide.
Just in case I added the line also into the local.conf but still the same result.

Reproduce able on release v25.1.1 and v25.0, as well as in our distro based on v25.0.
Are we missing something?

2

Since “SECURE_ZIP_ENABLE” is the outdated optional, and customer doesn’t need it.

We will remove it from the Doc.