Visible to Intel only — GUID: bhc1410500760090
Ixiasoft
Overview of the Design Security Feature
Hardware and Software Requirements
Steps for Implementing a Secure Configuration Flow
Steps to Enable Tamper-Protection Bit Programming
Supported Configuration Schemes
Security Mode Verification
Serial Flash Loader Support with Encryption Enabled
Serial Flash Loader Support with Encryption Enabled for Single FPGA Device Chain
JTAG Secure Mode for 28-nm and 20-nm FPGAs
Document Revision History for AN 556: Using the Design Security Features in Intel® FPGAs
Generating Single-Device .ekp File and Encrypting Configuration File using Intel® Quartus® Prime Software
Generating Single-Device .ekp File and Encrypting Configuration File using Command-Line Interface in Intel® Quartus® Prime Software
Generating Multi-Device .ekp File and Encrypting Configuration File using Intel® Quartus® Prime Software
Programming Volatile or Non-Volatile Key using Intel® FPGA Ethernet Cable and Intel® Quartus® Prime Software
Programming Single-Device Volatile or Non-Volatile Key using Intel® Quartus® Prime Software
Programming Single-Device Volatile or Non-Volatile Key using the Command-Line Interface in Intel® Quartus® Prime Software
Programming Multi-Device Volatile or Non-Volatile Key using Intel® Quartus® Prime Software
Programming Multi-Device Volatile or Non-Volatile Key using the Command-Line Interface in Intel® Quartus® Prime Software
Programming Key using JTAG Technologies
Visible to Intel only — GUID: bhc1410500760090
Ixiasoft
Generating Multi-Device .ekp File and Encrypting Configuration File using Intel® Quartus® Prime Software
To generate a multi-device .ekp file and encrypt your configuration file, follow these steps:
- Start the Intel® Quartus® Prime software.
- Repeat step 9–step 11 in Generating Single-Device .ekp File and Encrypting Configuration File using Intel Quartus Prime Software.
- Click Add File. The Select Programmer File dialog box appears.
- Select the single-device .ekp file, and type <single_ekp>.ekp in the File name field.
- Click Open.
Note: For the correct sequence of devices in the same JTAG chain, you can use the Auto-Detect option in the Intel® Quartus® Prime programmer. If one of the FPGA is not required to be key-programmed, you are not required to replace the device with the <single_ekp>.ekp file in the Intel® Quartus® Prime programmer. - Repeat step 3 for each device in the same chain. Ensure the right device sequence is used when adding the .ekp files to the programmer window.
- Highlight all the .ekp files you added and click Program/Configure.
- On the File menu, point to Create/Update and click Create JAM, SVF, or ISC File. The Create JAM, SVF, or ISC File dialog box appears.
- Select the required file format (.jam), for all the .ekp files in the File format field.
- Type the file name in the File name field, or browse to and select the file.
- Click OK to generate the .jam file.
- On the Tools menu, click Programmer Options. The Programmer Options dialog box appears.
Note: You must turn off Configure volatile design security key to generate a non-volatile .svf file of the .ekp file.
- Click OK.
- Repeat steps 7 to 9 to generate a .svf file for all the .ekp files. Use the default setting in the Create JAM, SVF, or ISC File dialog box when generating a .svf file of the .ekp file.