Hello Jagan,

I just realize the uboot tool mkimage i have is "mkimage version 2013.10", which does not support "-K,-k" and other options. Thus the command failed to run:

$ mkimage –D “${DTC_OPS}” –f rsa.its –K zynq-zed-pubkey.dtb –k mykeys –r rsa_signed.img

How can I get the latest mkimage which support all options for make image for secure boot?

Thanks Leo

leo@leo-VirtualBox:~$ mkimage -l Usage: mkimage -l image -l ==> list image header information mkimage [-x] -A arch -O os -T type -C comp -a addr -e ep -n name -d data_file[:data_file...] image -A ==> set architecture to 'arch' -O ==> set operating system to 'os' -T ==> set image type to 'type' -C ==> set compression type 'comp' -a ==> set load address to 'addr' (hex) -e ==> set entry point to 'ep' (hex) -n ==> set image name to 'name' -d ==> use image data from 'datafile' -x ==> set XIP (execute in place) mkimage [-D dtc_options] [-f fit-image.its|-F] fit-image -D => set options for device tree compiler -f => input filename for FIT source Signing / verified boot not supported (CONFIG_FIT_SIGNATURE undefined) mkimage -V ==> print version information and exit

leo@leo-VirtualBox:~$ mkimage -V mkimage version 2013.10