diff --git a/meta-aspeed-sdk/meta-ast2600-pfr/recipes-cerberus/cerberus-pfr-key-cancellation-image/cerberus-pfr-key-cancellation-image/key_management_tools/cancel_key_manifest0_keys.xml b/meta-aspeed-sdk/meta-ast2600-pfr/recipes-cerberus/cerberus-pfr-key-cancellation-image/cerberus-pfr-key-cancellation-image/key_management_tools/cancel_key_manifest0_keys.xml
index e7341e8484a4..a5d9023cc336 100644
--- a/meta-aspeed-sdk/meta-ast2600-pfr/recipes-cerberus/cerberus-pfr-key-cancellation-image/cerberus-pfr-key-cancellation-image/key_management_tools/cancel_key_manifest0_keys.xml
+++ b/meta-aspeed-sdk/meta-ast2600-pfr/recipes-cerberus/cerberus-pfr-key-cancellation-image/cerberus-pfr-key-cancellation-image/key_management_tools/cancel_key_manifest0_keys.xml
@@ -1,7 +1,7 @@
 <CancellationImage version="08.04" platform="Server-BMC" type="4">
   <!-- Cancel keys in key manifest 0 -->
   <CancellationSection>
-      <CancellationPolicy>BMC</CancellationPolicy> <!-- BMC or PCH -->
+      <CancellationPolicy>BMC</CancellationPolicy> <!-- BMC, PCH, or ROT -->
       <HashType>SHA256</HashType>
       <Key>
           <KeyId>2</KeyId>
diff --git a/meta-aspeed-sdk/meta-ast2600-pfr/recipes-cerberus/cerberus-pfr-key-cancellation-image/cerberus-pfr-key-cancellation-image/key_management_tools/cancel_key_manifest1_keys.xml b/meta-aspeed-sdk/meta-ast2600-pfr/recipes-cerberus/cerberus-pfr-key-cancellation-image/cerberus-pfr-key-cancellation-image/key_management_tools/cancel_key_manifest1_keys.xml
index 7430d92c0ff4..43934623b38c 100644
--- a/meta-aspeed-sdk/meta-ast2600-pfr/recipes-cerberus/cerberus-pfr-key-cancellation-image/cerberus-pfr-key-cancellation-image/key_management_tools/cancel_key_manifest1_keys.xml
+++ b/meta-aspeed-sdk/meta-ast2600-pfr/recipes-cerberus/cerberus-pfr-key-cancellation-image/cerberus-pfr-key-cancellation-image/key_management_tools/cancel_key_manifest1_keys.xml
@@ -1,7 +1,7 @@
 <CancellationImage version="08.04" platform="Server-BMC" type="4">
   <!-- Cancel keys in key manifest 1 -->
   <CancellationSection>
-      <CancellationPolicy>BMC</CancellationPolicy> <!-- BMC or PCH -->
+      <CancellationPolicy>BMC</CancellationPolicy> <!-- BMC, PCH or ROT -->
       <HashType>SHA256</HashType>
       <Key>
           <KeyId>0</KeyId>
diff --git a/meta-aspeed-sdk/meta-ast2600-pfr/recipes-cerberus/cerberus-pfr-signing-utility/cerberus-pfr-signing-utility/recovery_tools/obmc_recovery_image_generator.config b/meta-aspeed-sdk/meta-ast2600-pfr/recipes-cerberus/cerberus-pfr-signing-utility/cerberus-pfr-signing-utility/recovery_tools/obmc_recovery_image_generator.config
index e6eb6add1b86..058abefd971c 100644
--- a/meta-aspeed-sdk/meta-ast2600-pfr/recipes-cerberus/cerberus-pfr-signing-utility/cerberus-pfr-signing-utility/recovery_tools/obmc_recovery_image_generator.config
+++ b/meta-aspeed-sdk/meta-ast2600-pfr/recipes-cerberus/cerberus-pfr-signing-utility/cerberus-pfr-signing-utility/recovery_tools/obmc_recovery_image_generator.config
@@ -1,5 +1,5 @@
 Xml=obmc_recovery_image.xml
 InputImage=image-mtd-pfr
 Output=obmc_recovery_image.bin
-Key=prikey_2048.pem
+Key=pricsk0_2048.pem
 KeySize=256