BootConfig - Revision history

Hexkyz at 20:56, 4 January 2022

2022-01-04T19:56:51Z

← Older revision		Revision as of 22:56, 4 January 2022
Line 4:		Line 4:

	= Format =		= Format =
	Despite having 0x4000 for storage, the actual loaded BootConfig is only ~~0x640~~ bytes, with the following format:		Despite having 0x4000 for storage, the actual loaded BootConfig is only 0x400 bytes, with the following format:

	{\| class="wikitable" border="1"		{\| class="wikitable" border="1"
Line 23:		Line 23:
	\| 0x100		\| 0x100
	\| [[#Signed Configuration]]		\| [[#Signed Configuration]]
	\|-
	~~\| 0x400~~
	~~\| 0x240~~
	~~\| Reserved~~
	\|}		\|}

Line 39:		Line 35:
	\|-		\|-
	\| 0x0		\| 0x0
	\| ~~0x10~~		\| 0x4
	\|		\| Version (yyMMddHHmm in uint32)
			\|-
			\| 0x4
			\| 0xC
			\| Reserved
	\|-		\|-
	\| 0x10		\| 0x10
Line 52:		Line 52:
	\| 0x12		\| 0x12
	\| 0xF		\| 0xF
	\|		\| Reserved
	\|-		\|-
	\| 0x21		\| 0x21
Line 60:		Line 60:
	\| 0x22		\| 0x22
	\| 0x1		\| 0x1
	\|		\| Reserved
	\|-		\|-
	\| 0x23		\| 0x23
Line 72:		Line 72:
	\| 0x25		\| 0x25
	\| 0xB		\| 0xB
	\|		\| Reserved
	\|-		\|-
	\| 0x30		\| 0x30
Line 80:		Line 80:
	\| 0x38		\| 0x38
	\| 0x1C8		\| 0x1C8
	\|		\| Reserved
	\|}		\|}

Line 92:		Line 92:
	\| 0x0		\| 0x0
	\| 0x8		\| 0x8
	\|		\| Version
	\|-		\|-
	\| 0x8		\| 0x8
	\| 0x1		\| 0x1
	\| ~~Package2 Configuration. Bit~~ 0 ~~set means Package2 is stored unencrypted. Bit~~ 1 ~~set means Package2 is unsigned.~~		\| IsPackage2Plaintext (bit 0) and IsPackage2Unsigned (bit 1)
	\|-		\|-
	\| 0x9		\| 0x9
	\| 0x7		\| 0x7
	\|		\| Reserved
	\|-		\|-
	\| 0x10		\| 0x10
	\| 0x10		\| 0x10
	\| ~~Hardware Info. Must~~ match the ~~Hardware Info~~ read from fuses, or else the loaded Signed Config will be memset to 0 even if signed~~. This~~ allows Nintendo to set signed configuration on a per-unit basis.		\| HardwareInfo (must match the HardwareInfo read from fuses, or else the loaded Signed Config will be memset to 0 even if signed; this allows Nintendo to set signed configuration on a per-unit basis)
	\|-		\|-
	\| 0x20		\| 0x20
	\| 0x1		\| 0x1
	\| [[Filesystem_services#SetEnabledProgramVerification\|DisableProgramVerification]]~~. Controls~~ the default value for how to check NCA signatures.		\| [[Filesystem_services#SetEnabledProgramVerification\|DisableProgramVerification]] (controls the default value for how to check NCA signatures)
	\|-		\|-
	\| 0x21		\| 0x21
	\| 0xDF		\| 0xDF
	\|		\| Reserved
	\|}		\|}

Hexkyz: /* Unsigned Configuration */

2020-02-16T18:35:42Z

Unsigned Configuration

← Older revision		Revision as of 21:35, 16 February 2020
Line 44:		Line 44:
	\| 0x10		\| 0x10
	\| 0x1		\| 0x1
	\| IsDebugMode (bit 1) and TakeExtabtSerrorToEl3 (bit 2)		\| [[SMC#IsDebugMode\|IsDebugMode]] (bit 1) and TakeExtabtSerrorToEl3 (bit 2)
	\|-		\|-
	\| 0x11		\| 0x11

Hexkyz at 18:47, 16 February 2020

2020-02-16T17:47:32Z

@@ Line 5: / Line 5: @@
 = Format =
 Despite having 0x4000 for storage, the actual loaded BootConfig is only 0x640 bytes, with the following format:
 {| class="wikitable" border="1"
 |-
@@ Line 13: / Line 14: @@
 | 0x0
 | 0x200
-| Unsigned Configuration
+| [[#Unsigned Configuration]]
 |-
 | 0x200
@@ Line 21: / Line 22: @@
 | 0x300
 | 0x100
-| Signed Configuration
+| [[#Signed Configuration]]
 |-
 | 0x400
@@ Line 28: / Line 29: @@
 |}
-= Signed Config =
+= Signed Configuration =
 {| class="wikitable" border="1"
 |-
@@ Line 60: / Line 114: @@
+|
 |}

Hexkyz: /* Signed Config */

2020-02-16T17:17:35Z

Signed Config

← Older revision		Revision as of 20:17, 16 February 2020
Line 30:		Line 30:

	= Signed Config =		= Signed Config =

	~~Most of this is currently awaiting better documentation.~~

	{\| class="wikitable" border="1"		{\| class="wikitable" border="1"
	\|-		\|-
Line 39:		Line 36:
	! Description		! Description
	\|-		\|-
			\| 0x0
	\| 0x8		\| 0x8
	\| 0x1?		\|
			\|-
			\| 0x8
			\| 0x1
	\| Package2 Configuration. Bit 0 set means Package2 is stored unencrypted. Bit 1 set means Package2 is unsigned.		\| Package2 Configuration. Bit 0 set means Package2 is stored unencrypted. Bit 1 set means Package2 is unsigned.
			\|-
			\| 0x9
			\| 0x7
			\|
	\|-		\|-
	\| 0x10		\| 0x10
Line 48:		Line 53:
	\|-		\|-
	\| 0x20		\| 0x20
	\| 0x1?		\| 0x1
	\| [[Filesystem_services#SetEnabledProgramVerification\|DisableProgramVerification]]. Controls the default value for how to check NCA signatures.		\| [[Filesystem_services#SetEnabledProgramVerification\|DisableProgramVerification]]. Controls the default value for how to check NCA signatures.
			\|-
			\| 0x21
			\| 0xDF
			\|
	\|}		\|}

	= Unsigned Config =		= Unsigned Config =

SciresM: Detail some config

2018-02-21T21:00:48Z

Detail some config

← Older revision		Revision as of 00:00, 22 February 2018
Line 27:		Line 27:
	\| Reserved		\| Reserved
	\|}		\|}


			= Signed Config =

			Most of this is currently awaiting better documentation.

			{\| class="wikitable" border="1"
			\|-
			! Offset
			! Size
			! Description
			\|-
			\| 0x8
			\| 0x1?
			\| Package2 Configuration. Bit 0 set means Package2 is stored unencrypted. Bit 1 set means Package2 is unsigned.
			\|-
			\| 0x10
			\| 0x10
			\| Hardware Info. Must match the Hardware Info read from fuses, or else the loaded Signed Config will be memset to 0 even if signed. This allows Nintendo to set signed configuration on a per-unit basis.
			\|-
			\| 0x20
			\| 0x1?
			\| [[Filesystem_services#SetEnabledProgramVerification\|DisableProgramVerification]]. Controls the default value for how to check NCA signatures.
			\|}

			= Unsigned Config =

SciresM: .

2018-02-21T20:53:49Z

New page

Installed into the first 0x4000 sector of the eMMC storage's [[Flash_Filesystem#User_Partitions|BCPKG2 partitions]], "BootConfig" contains data used to configure TrustZone/OS behaviors.

BootConfig is normally all-zero for retail units, however TrustZone additionally sets the loaded configuration to all-zero when running on a retail unit anyway.

= Format =
Despite having 0x4000 for storage, the actual loaded BootConfig is only 0x640 bytes, with the following format:
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x200
| Unsigned Configuration
|-
| 0x200
| 0x100
| RSA-PSS Signature
|-
| 0x300
| 0x100
| Signed Configuration
|-
| 0x400
| 0x240
| Reserved
|}