Using `dek_blob` command in i.MX6QP - Wandboard QuadPlus

piotr_mikulski — Tue, 14 Aug 2018 10:18:46 GMT

Dear NXP community,

I try to generate a dek blob on a mentioned wandboard imx6qp processor.

So I've written dek.bin on the SD card with a signed u-boot.

After those commands:

load mmc 0 10800000 dek.bin

dek_blob 0x10800000 0x10801000 128

I receive such an output:

U-Boot 2018.09-rc1-43140-g8e00d80-dirty (Aug 13 2018 - 17:10:40 +0200)

CPU: Freescale i.MX6QP rev1.0 at 792 MHz
Reset cause: POR
I2C: ready
DRAM: 2 GiB
PMIC: PFUZE100 ID=0x10
MMC: FSL_SDHC: 0, FSL_SDHC: 1
Loading Environment from MMC... *** Warning - bad CRC, using default environment

Failed (-5)
No panel detected: default to HDMI
Display: HDMI (1024x768)
In: serial
Out: serial
Err: serial
Board: Wandboard rev D1
Net: FEC [PRIME]
Hit any key to stop autoboot: 0

=> hab_status

Secure boot disabled

HAB Configuration: 0xf0, HAB State: 0x66
No HAB Events Found!
=> load mmc 0 10800000 dek.bin
16 bytes read in 15 ms (1000 Bytes/s)
=> dek_blob 0x10800000 0x10801000 128

RNG: Instantiation failed with error 0xfffffffe
RNG: Instantiation failed with error 0xfffffffe
RNG: Instantiation failed with error 0xfffffffe
RNG: Instantiation failed with error 0xfffffffe
RNG: Instantiation failed with error 0xfffffffe
RNG: Instantiation failed with error 0xfffffffe
RNG: Instantiation failed with error 0xfffffffe
RNG: Instantiation failed with error 0xfffffffe
RNG: Instantiation failed with error 0xfffffffe
RNG: Instantiation failed with error 0xfffffffe
RNG: Instantiation failed with error 0xfffffffe
RNG: Instantiation failed with error 0xfffffffe
RNG: Instantiation failed with error 0xfffffffe
RNG: Instantiation failed with error 0xfffffffe
RNG: Instantiation failed with error 0xfffffffe
RNG: Instantiation failed with error 0xfffffffe
RNG: Instantiation failed with error 0xfffffffe
RNG: Instantiation failed with error 0xfffffffe
RNG: Instantiation failed with error 0xfffffffe
RNG: Instantiation failed with error 0xfffffffe
RNG: Instantiation failed with error 0xfffffffe
RNG: Instantiation failed with error 0xfffffffe
RNG: Instantiation failed with error 0xfffffffe
RNG: Instantiation failed with error 0xfffffffe
RNG: Failed to instantiate RNG
SEC0: RNG instantiation failed

Encapsulating provided DEK to form blob
Allocation of page 0 in partition 1 failed 0x1

My device isn't yet closed.

I've found out that icache and dcache shall be OFF for blob generation.

It didn't help me.

I've found out that the signed u-boot can NOT be singed with:

[Unlock]

Engine = CAAM

Features = RNG

This also didn't help.

I've tried combination with signed SPL(+ signed/not signed u-boot), and without SPL. Nothing works.

I use those sources:

git://git.denx.de/u-boot-imx.git

Do you have any idea, what am I missing here?

Why the dek_blob command cannot instantiate RNG?

Best Regards,

Piotr Mikulski

Re: Using `dek_blob` command in i.MX6QP - Wandboard QuadPlus

david_jenei — Tue, 18 Dec 2018 10:27:29 GMT

I am facing the same issue with i.MX6Q. Device is not closed, no rng trim fused. Testing with mainline uboot 2018-05.

```

RNG: Instantiation failed with error 0xfffffffe
SEC Dequeue timed out

```

Re: Using `dek_blob` command in i.MX6QP - Wandboard QuadPlus

Yuri — Wed, 19 Dec 2018 04:08:42 GMT

Hello,

please try the following patch:

https://portland.source.codeaurora.org/patches/external/imxsupport/uboot-imx/imx_v2016.03_4.1.15_2.0.0_ga/HAB-238-Run-RNG-self-test-for-impacted-i.MX-chips.zip

Have a great day,
Yuri

-----------------------------------------------------------------------------------------------------------------------
Note: If this post answers your question, please click the Correct Answer button. Thank you!
-----------------------------------------------------------------------------------------------------------------------

topic Using `dek_blob` command in i.MX6QP - Wandboard QuadPlus in i.MX Processors

Using `dek_blob` command in i.MX6QP - Wandboard QuadPlus

Re: Using `dek_blob` command in i.MX6QP - Wandboard QuadPlus

Re: Using `dek_blob` command in i.MX6QP - Wandboard QuadPlus