topic Re: Kernel image authentication using FIT image (secure boot) in S32G

Kernel image authentication using FIT image (secure boot)

Jayashree — Thu, 16 Jan 2025 13:22:23 GMT

I am currently working on the S32G3 Goldbox using BSP 40. I have followed the manual's instructions to create a FIT image. However, when I execute the bootm along with the load address im getting the following error

Wrong Image Format for bootm command
ERROR: can't get kernel image!

iminfo gives the following statement
iminfo
## Checking Image at 80000000 ...
Unknown image format!

But when i do the md command, it shows like this
md 0x80000000 100
80000000: edfe0dd0 821f1101 38000000 441d1101 ...........8...D
80000010: 28000000 11000000 10000000 00000000 ...(............
80000020: c9000000 0c1d1101 00000000 00000000 ................
80000030: 00000000 00000000 01000000 00000000 ................
80000040: 03000000 04000000 82000000 edb88867 ............g...
80000050: 03000000 27000000 00000000 20544946 .......'....FIT
80000060: 67616d69 69772065 63206874 72706d6f image with compr
80000070: 69737365 61206e6f 7320646e 696e6769 ession and signi
80000080: 0000676e 03000000 04000000 0c000000 ng..............

Could you please provide guidance or assistance in resolving this issue

Re: Kernel image authentication using FIT image (secure boot)

carlos_o — Thu, 16 Jan 2025 18:25:10 GMT

Hi @Jayashree,

Are you booting from SD or QSPI?

Can you please describe the process you follow to flash the image?

Re: Kernel image authentication using FIT image (secure boot)

Jayashree — Fri, 17 Jan 2025 05:17:28 GMT

As mentioned in the manual, "The resulting FIT image must be copied to the boot partition of the SD Card." i am copying the image to the boot partition of the sd card and booting

Re: Kernel image authentication using FIT image (secure boot)

carlos_o — Fri, 17 Jan 2025 18:18:17 GMT

Hi @Jayashree,

Which version of HSE are you using?

Double check that your .its file is configured correctly, essentially the paths to the kernel and dtb.

If you want to share the configuration to review it, you can do it in a private channel opening a ticket with the same issue and my user to track it.

Re: Kernel image authentication using FIT image (secure boot)

Jayashree — Mon, 20 Jan 2025 07:10:36 GMT

i am using this HSE version HSE_FW_S32G3_0_2_22_0
But how does HSE matter in the kernel image verification using FIT image?
My bootm command seems to fail but im not sure why

Re: Kernel image authentication using FIT image (secure boot)

carlos_o — Tue, 21 Jan 2025 19:19:39 GMT

The HSE is the component that execute the secure boot in this case that's why is important to know that you a using the compatible version of it with the BSP.