topic Re: LX2160A get MP key failed in Layerscape

LX2160A get MP key failed

Jeffrey_Lai — Wed, 22 Jul 2026 07:53:44 GMT

Hi NXP,

We are building LX2160A secure boot system based on LLDP and verifying MP key function.

Install and start up the secure boot system on our LX2160A board are OK and so we think ITS bit value is 1, but get "Device is not initiated" error after execute "mp_app -p" command.

Do you have any advice to check this issue ?

Thank you,

Jeffrey

Re: LX2160A get MP key failed

yipingwang — Thu, 23 Jul 2026 07:49:03 GMT

Did customer follow LLDP document section 6.4.4?

Such as

Run tee-supplicant & command from the Linux prompt.
Depending on the Linux kernel version used insmod securekeydev.ko from right folder

Please also let customer enable kernel printk when run 'mp_app', and share their log.

echo 8 > /proc/sys/kernel/printk

dmesg

Re: LX2160A get MP key failed

Jeffrey_Lai — Fri, 24 Jul 2026 06:38:53 GMT

Hi yipingwang,

Yes, we start tee-supplicant and load securekeydev.ko before execute mp_app command.

The following is dmesg information.

Jeffrey

Re: LX2160A get MP key failed

yipingwang — Mon, 27 Jul 2026 07:48:35 GMT

Please refer to the following update from the AE team.

From customer's feedback, I can see "error: caam_submit_mp_get_pub_key_op: submit_job", it indicates send job to SEC failed.

Please ask customer do below test in their Linux system,
1. run xtest, to see any error report?
2. please run "modprobe caam" to install caam module for LX2160, if install module failed, please update modules compatible with your kernel version.
3. If also report error, apply below patch to check SEC return result to identify the error type, and share their full log.

diff --git a/securekeydev/securekey_caam.c b/securekeydev/securekey_caam.c
index b82acd3..d657742 100644
--- a/securekeydev/securekey_caam.c
+++ b/securekeydev/securekey_caam.c
@@ -59,12 +59,14 @@ static int submit_job(struct device *jrdev, uint32_t *desc)

        /* Call caam_jr_enqueue function for Enqueue a job descriptor head. */
        ret = caam_jr_enqueue(jrdev, desc, caam_op_done, NULL);
+       pr_err("caam_jr_enqueue ret (%d)\n", ret);
        if (!ret)
                wait_for_completion_interruptible(&comp);
        else
                return ret;

        ret = job_comp_status;
+       pr_err("job_comp_status ret (%d)\n", ret);
        return ret;
 }

Regards,