From b378bbf61dd8430ab0d25d934f28d0861c8befae Mon Sep 17 00:00:00 2001 From: Conor Patrick Date: Tue, 18 Feb 2020 10:53:47 -0500 Subject: [PATCH] Update building.md --- docs/solo/building.md | 21 ++++++++++++++++----- 1 file changed, 16 insertions(+), 5 deletions(-) diff --git a/docs/solo/building.md b/docs/solo/building.md index f5752ab..1dd6026 100644 --- a/docs/solo/building.md +++ b/docs/solo/building.md @@ -104,9 +104,24 @@ solo mergehex bootloader.hex solo.hex bundle.hex `bundle.hex` is our complete firmware build. Note it is in this step that you can include a custom attestation certificate or lock the device from debugging/DFU. -By default the "hacker" attestation certifcate and key is used. +By default the "hacker" attestation certifcate and key is used. Use the `--lock` flag +to make this permanent. ``` +solo mergehex \ + --attestation-key "0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF" \ + --attestation-cert attestation.der \ + solo.hex \ + bootloader.hex \ + bundle.hex +``` + +**Warning**: If you use `--lock`, this will permanently lock the device to this new bootloader. You +won't be able to program the bootloader again or be able to connect a hardware debugger. +The new bootloader may be able to accept (signed) updates still, depending on how you configured it. + +``` +# Permanent! solo mergehex \ --attestation-key "0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF" \ --attestation-cert attestation.der \ @@ -118,9 +133,5 @@ solo mergehex \ See [here for more information on custom attestation](/solo/customization/). -If you use `--lock`, this will permanently lock the device to this new bootloader. You -won't be able to program the bootloader again or be able to connect a hardware debugger. -The new bootloader may be able to accept (signed) updates still, depending on how you configured it. - To learn more about normal updates or a "full" update, you should [read more on Solo's boot stages](/solo/bootloader-mode).