wolfBoot now boots the NAI 68INT6, a rugged 3U OpenVPX single board computer, through the Intel Firmware Support Package (FSP) to a signed Linux. wolfBoot has supported Intel Tiger Lake through the FSP for some time, and recent public pull requests extend that support.
The NAI 68INT6 from North Atlantic Industries is a SOSA-aligned 3U OpenVPX SBC powered by the Intel Core i7-1185GRE (Tiger Lake UP3). It is also available with the i7-1186GRE, for which Intel provides DO-178C DAL A certification artifacts. These boards serve rugged defense and aerospace systems, where a trusted boot chain is essential and certification is often required. wolfBoot is a small, portable secure bootloader available with FIPS 140-3 (Level 1/2) validated cryptography or DO-178C certification evidence up to DAL A, allowing the same bootloader to support development through a certifiable program.
wolfBoot Intel Tiger Lake features
- Secure boot: every stage and the OS image are signature-verified before use.
- Algorithm Agility: Support for classical signatures (ECC, RSA, Ed25519) and latest Post-quantum signatures like LMS, XMSS, and ML-DSA including hybrid schemes
- Measured boot: each firmware stage is recorded into the TPM.
- A/B firmware update: switch to a new image, and fall back if it fails to boot.
- Anti-rollback: refuse a downgraded, older image.
- Encrypted update partitions: firmware updates can be stored encrypted on the device.
Recent additions, now in public wolfBoot:
- Boots a 64-bit Linux kernel (a bzImage), with an optional initial RAM disk (initrd).
- Measures the booted operating system into the TPM, separate from the firmware, so another system can check what ran.
- A tool to decode the Intel FSP settings (the firmware that initializes the chip).
- Selectable serial debug console through every phase of Intel FSP startup.
- Handles the resets that Tiger Lake firmware asks for during startup, including a full platform reset.
Intel Panther Lake support is planned next.
Building
cp config/examples/nai_68int6.config .config tools/scripts/x86_fsp/tgl/tgl_download_fsp.sh # FSP UPD headers tools/scripts/x86_fsp/tgl/nai_extract_fsp.sh <68INT6.bin> # the board's own FSP make # build wolfBoot tools/scripts/x86_fsp/tgl/assemble_image.sh -n <68INT6.bin> # -> final_image.bin
See the NAI 68INT6 section of docs/Targets.md for the full flow.
Resources
- NAI 68INT6 board
- wolfBoot NAI 68INT6 target (ACPI generation, TPM anti-rollback, the board HAL)
- Targets and build steps (NAI 68INT6 section)
- Intel Tiger Lake support (Linux payload, OS measurement, FSP config decoder, serial console, reset handling)
- Disk boot confirmation and rollback
- TPM PCR bank and digest pairing
If you have questions about any of the above, please contact us at facts@wolfssl.com or call us at +1 425 245 8247.
Download wolfSSL Now