Collection stick
A Collection stick is a USB flash storage device (USB stick) that is used to collect Developer keys, the unique cryptographic signatures for XO laptops that permit access to the system firmware.
Note: Collection sticks were previously called Collection keys, but the use of the word key in this context is overloaded with alternate meanings and leads to confusion.
Making a Collection stick
You'll need a FAT-formatted or FAT32-formatted USB storage device for this, as well as a computer with Internet access. The USB storage device does not need to be empty.
- Create a
/boot
directory in the root of your USB storage device. If such a directory already exists, it should be empty. (Exception: if you have already used this Collection stick to gather data from a number of XOs, there may be alaptops.dat
file in the/boot
directory. Do not deletelaptops.dat
.) - On the computer with Internet access, Actos.zip and Runos.zip (source code) into that
/boot
directory. You should now have 2 files (3, if you havelaptops.dat
in a/boot
directory on the root of your USB storage device.
Collecting with a Collection stick
For each XO you need a Developer key from:
- Make sure the XO is powered off.
- Plug the USB storage device into the XO, then power it on.
- You will see a graphical "XO" screen and then a short message like "SHFxxxxxxxx nnnnnnnnnnnnnnn; Laptop data recorded successfully". The XO will then power itself off or otherwise indicate that it is done.
- Remove the USB storage device from the XO.
When you have finished this process on all the XOs you need Developer keys from, plug the USB storage device into the computer with Internet access and attach the /laptops.dat
file from the USB storage device to an email to help at laptop dot org
indicating whether you want a developer key or an activation key.
Making an Unlock stick
(formerly called an Unlock key)
You will receive back one or two files from OLPC after submitting your laptops.dat
file (this may take several days). Here is what to do once you get these files.
- Get a USB storage device. This can be your old Collection stick; you will have to rename the /boot directory to something else like /collection. If you don't do this, your laptop will just re-run the collection script.
- If you requested a Developer key: You will get a file called develop.sig. Make a directory called security/ in the root directory of your USB storage device and copy this file into it.
- If you requested an activation key: You will get a file called lease.sig. Copy this file into the root directory of your USB storage device.
You are now ready to use your Unlock stick.
Unlocking with an Unlock stick
For each XO you are trying to unlock:
- Make sure the XO is powered off.
- Plug the USB storage device into the XO, then power it on.
- That's it!
- Note that this process only unlocks your XO for one boot - if you want to unlock your XO permanently without needing to plug in the USB storage device every time you boot, see #Permanently unlocking with an Unlock stick.
Activation keys
No action is required. Activation keys are automatically copied to /security/lease.sig on your XO. Keep the activation key around (or copy it to your School Server) in case you later need to reflash the XO.
Developer keys
When the XO boots the first time, you should see a textual prompt, which you will see within the first few seconds of booting (along with a short countdown to give you time to hit the , Escape key). This is your indication that the Developer key on the Unlock stick has been found.
Permanently unlocking with an Unlock stick
To permanently disable secure booting, while booting with the Unlock stick, press , Escape at the sound of the startup script. At the firmware prompt, type "disable-security", then power cycle the laptop and repeat the sequence. See Activation and developer keys.
The Developer key is not automatically copied to your laptop's internal flash memory by the Unlock stick. You can copy security/develop.sig from the USB storage device into /security/develop.sig on the XO. You'll need to be root in a Terminal activity to do that.
cp /media/USBDRIVE/security/develop.sig /security/develop.sig