topic Re: U-boot hab_status indicate warnings but no events are displayed in i.MX Processors

U-boot hab_status indicate warnings but no events are displayed

ollesandberg — Thu, 15 Nov 2018 16:26:55 GMT

We're trying to implement secure boot through HAB here. We have signed the SPL/U-boot image through cst and burnt the fuses corresponding to the public key. Now when testing for HAB events with the u-boot command 'hab_status' it displays the following:

u-boot=> hab_status
Secure boot disabled

HAB Configuration: 0xf0, HAB State: 0x66‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Missing in the output is the print 'No HAB Events Found!', but no HAB events are obviously displayed either.

Further debugging shows that the u-boot function 'hab_rvt_report_status()' returns HAB_WARNING (0x69).

So question is, what does this error/warning indicate, what might be wrong with our setup?

BR, Olle

Re: U-boot hab_status indicate warnings but no events are displayed

igorpadykov — Sun, 18 Nov 2018 22:57:16 GMT

Hi Olle

seems it is described in RNG-self-test-patch on

https://portland.source.codeaurora.org/patches/external/imxsupport/uboot-imx/imx_v2016.03_4.1.15_2.0.0_ga/

Best regards
igor
-----------------------------------------------------------------------------------------------------------------------
Note: If this post answers your question, please click the Correct Answer button. Thank you!
-----------------------------------------------------------------------------------------------------------------------

Re: U-boot hab_status indicate warnings but no events are displayed

ollesandberg — Mon, 19 Nov 2018 08:58:30 GMT

Hi Igor,

Do I understand it correctly that this is a bug in boot ROM and not caused by our setup?

The patch mentions iMX6, but it affects iMX8 also?

/Olle

Re: U-boot hab_status indicate warnings but no events are displayed

igorpadykov — Wed, 21 Nov 2018 02:42:20 GMT

Hi Olle

yes this is correct understanding.

iMX8 are not affected.

Best regards
igor

Re: U-boot hab_status indicate warnings but no events are displayed

ollesandberg — Wed, 21 Nov 2018 08:34:13 GMT

Hi Igor,

We're on iMX8M so then this patch is irrelevant for our potential error I guess.

Any other idea what might be causing the warning from hab_rvt_report_status()?

Is it a problem or can it be ignored, that is - if we close the device will it still boot?

BR,

Olle

Re: U-boot hab_status indicate warnings but no events are displayed

igorpadykov — Thu, 22 Nov 2018 03:42:32 GMT

Hi Olle

sorry I missed that it is i.MX8M.

In general i.MX8M secure boot is not officially supported yet

and there is no documentation for it (only some preliminary codes).

Suggest to proceed with Professional Services

NXP Professional Services|NXP

As general suggestion one can try nxp uboot from below link

and latest chip revision with suffix "B", rev.1.1.

uboot-imx - i.MX U-Boot

https://www.nxp.com/docs/en/data-sheet/IMX8MDQLQIEC.pdf

Best regards
igor

Re: U-boot hab_status indicate warnings but no events are displayed

ollesandberg — Mon, 07 Jan 2019 14:18:37 GMT

Is there any plan for when secure boot will be officially supported by NXP?

BR, Olle

Re: U-boot hab_status indicate warnings but no events are displayed

igorpadykov — Thu, 10 Jan 2019 01:33:44 GMT

Hi Olle

I think such app note will be published, unfortunately I am not aware of date.

Best regards
igor

Re: U-boot hab_status indicate warnings but no events are displayed

jeremy_sauget — Tue, 22 Sep 2020 07:54:29 GMT

Hi,

I just found this thread while working on secure boot for imx8m evkb board.

Is secure boot supposed to be supported now ? If it is, could you please let met know the version of the BSP to use in this case. (I am trying to use it but I without success for now and looking at the code in U-Boot / ATF, I have the feeling that it is not fully supported yet but maybe I am not using the correct version of the BSP).

Best regards,