Production

Five lessons from taking an i.MX RT control unit from first boot toward production: the bootloader that hides your SDRAM setup, the flash size nobody measured, writing the flash you execute from, firmware updates as a protocol, and surviving the power cut.

Secure boot on the i.MX RT10xx is a sequence of one-way steps. A production checklist in the order that avoids bricking boards: trust boundary, keys, signing, testing on an open part, fusing the SRK hash, encrypted XIP, closing the part, and locking debug.