i.MX ProcessorsのトピックConfiguration changes required to sign uboot with a different key

Configuration changes required to sign uboot with a different key

rohininarasipur — Thu, 22 Jun 2017 09:33:11 GMT

Hi,

Even though I generated 4 different key sets using hab4_pki_tree.sh script, I am able to use only the first pair of keys for signing and verification. If I specify second, third or fourth certificate in the configuration file, HAB events (HAB_INV_SIGNATURE and HAB_INV_KEY) are generated during boot. If I choose second CSF and IMG certificate, then should I also change the source index in Install SRK section? How will HAB know which SRK to use for verifying root of trust? And what other changes should I do in my config file to use any certificate pair other than the first CSF and IMG pair?

Regards,

Rohini

Re: Configuration changes required to sign uboot with a different key

Yuri — Fri, 23 Jun 2017 07:06:35 GMT

Hello,

Sorry, but the information you are requesting is treated as confidential info at this time and requires a signed NDA

(Non-Disclosure Agreement). Naturally, we cannot discuss this with you in public anyway, this requires to be handled

as a Service Request (SR).

Support|NXP

Have a great day,
Yuri

-------------------------------------------------------------------------------
Note: If this post answers your question, please click the Correct Answer button. Thank you!
-------------------------------------------------------------------------------