S ShieldSigner / build & use0.0.2-dev

TASK 04

Flash & boot the software

Select the correct image, verify it, write microSD, and check the first boot.

You need
  • Luckfox Pico Mini with SD boot
  • microSD + reader
  • Matching Mini SD .img
You’ll have

A verified microSD and a first-boot hardware checklist.

Choose a local build or upstream image

  • For our UR2 carrier, build with the previous workflow. Do not substitute the historical URT baseline hash for a new UR2 image.
  • The pinned upstream B13 Mini SD image is a convenient reference release; its stock reader setting is URT and still needs adaptation for this UR2 carrier.
  • Do not flash an SD .img as a NAND/eMMC update, or a Pro/Max/Pi image onto Mini.

Verify the image before writing

  • For the exact B13 upstream file below, the expected SHA-256 is 0b6ae5c48c952b614e515c042e58b9b8527c3a8ff8e7a7894ffa9e6196ff4ebf.
  • For your own build, use its generated checksum manifest; its hash is expected to differ.
  • A checksum proves file identity. Verify release signatures/signer identity using the upstream guide; the public dev key does not establish exclusive trust.
macOS — hash the selected file
cd ~/Downloads
shasum -a 256 seedsigner-luckfox-pico-mini-sd-SeSi-0.8.7_ShSi-B13-osproduction-signed-devkey.img

Write the microSD on your Mac

  • Open balenaEtcher, choose Flash from file and select the .img.
  • Select the removable microSD by its capacity/name. Flashing erases that selected device; remove unrelated external drives first.
  • Flash and wait for verification to finish. Eject the card. If macOS offers to initialize an unfamiliar Linux partition, choose Ignore.

First boot: verify one subsystem at a time

  • With power off, insert the card and connect the qualified LCD/camera/ribbon. Insulate module pins under the screen.
  • Use one regulated 5 V supply. Check screen, all eight keys and a harmless camera QR before testing cards.
  • Confirm System Info matches your image. A blank screen is a hardware/driver diagnostic, not permission to keep reflashing random images.

If the card reader is missing

  • UR2 hardware needs /dev/ttyS2:SEC1210UR2 in the reader file. Keep the UART2 console disabled.
  • On a shell-enabled bench image, inspect the reader file and pcscd status. Production images may deliberately have no shell.
  • Secure-boot fuse provisioning is separate and irreversible; it is not a step in this first flash.
Inspect on a development image
cat /etc/reader.conf.d/sec1210
/etc/init.d/S60pcscd status
Continue the buildUse SeedSigner →
Sources & deeper reference

Checked 12 October 2026. Menu names can vary with firmware.

Boot and power diagnosis ↗Edit this workflow on GitHub ↗