pseregiet

> Unless you really need to write your own provisioning tool (which is not recommended, the bootrom signing process is quite complex) please use the secure-boot-provisioner. https://github.com/raspberrypi/rpi-sb-provisioner > > "Run...

> If you think the key customer signing key is already written then start the process from scratch using rpiboot but specify the -r flag > > `../tools/update-pieeprom.sh -fr -k...

> https://www.raspberrypi.com/documentation/computers/config_txt.html#secure-boot-configuration-properties also says: "The following config.txt properties are used to program the secure-boot OTP settings. These changes are irreversible and can only be programmed via RPIBOOT when flashing the...

> AFAIK the only "external hardware" necessary is a standard USB cable between a USB-A port on your PC and the Pi5's USB-C power-input port, so maybe you _did_ use...

That's a shame. I understand you wanting to prevent accidental enabling of secure boot but I think it is valid and sensible to have this as an option. I think...