topic Re: S32K3_HSE_ASB_postboot_passflag in S32K

S32K3_HSE_ASB_postboot_passflag

wuxianlong — Fri, 21 Feb 2025 02:09:26 GMT

Hi, NXP

I am now ready to use HSE's ASB to verify my BOOT and APP. I use Preboot SMR to verify my BOOT and release the M7 kernel when the verification passes. Then I used postboot to verify my APP in parallel. The problem now is how to confirm that my APP verification was successful. (I can't find the status sign of postboot pass)

The current idea is to wait for the HSE initialization to complete before jumping to the APP, and then confirm whether the verification is successful by checking whether the SMR KEYs are valid. Can this method be implemented? is there a better way?

Best Regards,
xianlong

Re: S32K3_HSE_ASB_postboot_passflag

lukaszadrapa — Fri, 21 Feb 2025 10:04:47 GMT

Yes, the end of post boot phase can be monitored by HSE_STATUS_INIT_OK:

You can read the status directly. See struct hseAttrSmrCoreStatus_t in HSE Service API reference manual:

You can find an example for Get Attribute service in HSE DemoExamples:
https://www.nxp.com/webapp/Download?colCode=S32K3_HSE_DemoExamples

This is from c:\NXP\S32K3_HSE_DemoExamples_1_0_0\S32K3_HSE_DemoExamples\Secure_Boot\S32K344_Advanced_SecureBoot:

/* Get status of the Secure Memory Region and Core Reset Entry installation */
HseResponse = Get_Attr(
HSE_SMR_CORE_BOOT_STATUS_ATTR_ID,
sizeof(hseAttrSmrCoreStatus_t),
(void *)(&smrCoreStatus));
ASSERT(HSE_SRV_RSP_OK == HseResponse);

Regards,
Lukas

Re: S32K3_HSE_ASB_postboot_passflag

wuxianlong — Sat, 22 Feb 2025 01:32:27 GMT

Thank you very much for your help. I ignored the API documentation before and did not find the information.