topic Signed Kernel Image: HAB Events in i.MX Processors

Signed Kernel Image: HAB Events

dheerajr — Wed, 14 Mar 2018 02:11:47 GMT

Hi, I am implementing secure boot for imx6sx sabresd board. I have generated an IVT table for kernel and have signed the kernel image. However, once i execute this command in u-boot (hab_auth_img 82000000 54a020), these HAB events show up. May I know what this HAB events mean, how to understand these events and how to overcome this problem?

=> hab_auth_img 82000000 54a020

Authenticate image from DDR location 0x82000000...

Secure boot enabled

HAB Configuration: 0xcc, HAB State: 0x99

--------- HAB Event 1 -----------------
event data:
0xdb 0x00 0x08 0x41 0x33 0x05 0x0a 0x00

STS = HAB_FAILURE (0x33)
RSN = HAB_INV_IVT (0x05)
CTX = HAB_CTX_AUTHENTICATE (0x0A)
ENG = HAB_ENG_ANY (0x00)

Regards,

Dheeraj

Re: Signed Kernel Image: HAB Events

Yuri — Wed, 14 Mar 2018 08:30:15 GMT

Hello,

The error message with HAB_INV_IVT means Invalid Image Vector Table (IVT):

- IVT malformed;

- IVT version number is less than HAB library version.

Please check kernel signing process, using “i.MX 6 Linux High Assurance Boot (HAB) User's Guide”.

https://www.nxp.com/webapp/Download?colCode=L3.14.28_1.0.0_LINUX_DOCS

Have a great day,
Yuri

-----------------------------------------------------------------------------------------------------------------------
Note: If this post answers your question, please click the Correct Answer button. Thank you!
-----------------------------------------------------------------------------------------------------------------------