iMx6 SabreLite BD - HABv4 Secure Boot Testing

ashokrajasekar — Mon, 24 Sep 2018 10:27:10 GMT

Hello,

I am using iMx6 SABRELITE Boundary Device Board. I am about to Test HABv4 Secure Boot using iMX6 SabreLite-BD platform.

I am using GitHub - Freescale/u-boot-fslc - (branch: 2018.03+fslc - )

I have configured for SecureBoot nad built u-boot.imx

Then I used CST(habimagegen.sh) script using ./cst command and

generated u-boot-signed-pad.bin u-boot image with CSF image with u-boot.bin.

I have followed HABv4 documents CST_UG.pdf and AN4581_imx_series_secureboot.pdf and secure_boot_on_imx6.pdf

I want to know Is it possible to Program the SRK Fuses temporarily not permanent for testing secure-boot & development purpose. Using "fuse prog" u-boot command will make the fuse register permanently programmed.

   fuse prog 3 0 0x20593752
   fuse prog 3 1 0x6ACE6962
   ...

fuse prog 3 7 0x1190FD4D

Is there any way so that I can debug or test secure boot load & run the u-boot without permanently fusing the SRK hash.

into fuse map bank registers.

Thanks & Regards

Ashok

Re: iMx6 SabreLite BD - HABv4 Secure Boot Testing

igorpadykov — Tue, 25 Sep 2018 00:20:59 GMT

Hi Ashok

one can look at boundary devices tutorials:

High Assurance Boot (HAB) for dummies - Boundary Devices

Secure boot on i.MX6 Nitrogen6X boards - Boundary Devices

I am afraid there is no way to test it without permanently fusing SRK.

Best regards
igor
-----------------------------------------------------------------------------------------------------------------------
Note: If this post answers your question, please click the Correct Answer button. Thank you!
-----------------------------------------------------------------------------------------------------------------------

i.MX ProcessorsのトピックRe: iMx6 SabreLite BD - HABv4 Secure Boot Testing

iMx6 SabreLite BD - HABv4 Secure Boot Testing

Re: iMx6 SabreLite BD - HABv4 Secure Boot Testing