My BOOT.bin file, created with the 2017.1 SDK "Create Boot Image", contains an FSBL, ATF, bitstream and u-boot.
When I boot, ATF fails.
In the 2017.1 version of the FSBL, the order used to load the partitions matters. The bitstream needs to be loaded before ATF.
You will need to manually modify the .bif file to set the proper exception levels.
Below is a sample of a working .bif for FSBL + ATF + u-boot: