For those of you who are still finding this error 'failed to run tsec keygen firmware'
this seems to only occur if your booting from hekate and/or sxos chainloading.
if you use tegrarcm and load the fusee bin from latest release it will work without getting that error.
SciresM made a comment...