# Secure Boot on Genio510/700

**URL:** <https://genio-community.mediatek.com/t/secure-boot-on-genio510-700/2023>\
**Category:** Yocto\
**Tags:** IoT-Yocto, Genio-700, Genio-510\
**Created:** [April 8, 2026, 8:18am UTC](https://genio-community.mediatek.com/t/secure-boot-on-genio510-700/2023 "2026-04-08T08:18:28Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![tokyoking](https://avatars.discourse-cdn.com/v4/letter/t/d07c76/32.png) [@tokyoking](https://genio-community.mediatek.com/u/tokyoking)\
**Post date:** [April 8, 2026, 8:18am UTC](https://genio-community.mediatek.com/t/secure-boot-on-genio510-700/2023/1 "2026-04-08T08:18:28Z")

</div>

We are trying to enable Secure Boot on our Genio700/510 based module.  
We started with MediaTek’s Genio700-EVK board and building default IoT Yocto image and following the guide [Secure Boot — IoT Yocto documentation](https://mediatek.gitlab.io/aiot/doc/aiot-dev-guide/master/sw/yocto/secure-boot.html)

What we did according to the guide, appended the following to the local.conf

DISTRO\_FEATURES:append = " secure-boot"  
BL2\_SIGN\_ENABLE = “1”  
DA\_SIGN\_ENABLE = “1”  
UBOOT\_SIGN\_KEYNAME=“u-boot”  
UBOOT\_SIGN\_IMG\_KEYNAME=“u-boot-img”

SECURE\_ZIP\_ENABLE = “1”

Getting the error in do\_image\_secure task:  
…  
rm: cannot remove ‘rity-demo-image-genio-700-evk.rootfs-20260319194915.secure’: No such file or directory  
WARNING: … exit 1 from ‘rm rity-demo-image-genio-700-evk.rootfs-20260319194915.secure’  
…

I enabled the NDA Build as per guide.  
Just in case I added the line also into the local.conf but still the same result.

Reproduce able on release v25.1.1 and v25.0, as well as in our distro based on v25.0.  
Are we missing something?

---

<div class="post-metadata">

**Author:** ![macpaul-lin-mtk](https://avatars.discourse-cdn.com/v4/letter/m/76d3ee/32.png) [@macpaul-lin-mtk](https://genio-community.mediatek.com/u/macpaul-lin-mtk)\
**Post date:** [April 8, 2026, 8:19am UTC](https://genio-community.mediatek.com/t/secure-boot-on-genio510-700/2023/2 "2026-04-08T08:19:35Z")

</div>

Since “SECURE\_ZIP\_ENABLE” is the outdated optional, and customer doesn’t need it.

We will remove it from the Doc.
