i.MX ProcessorsのトピックRe: IMX8M YOCTO how to sign image to secure boot

IMX8M YOCTO how to sign image to secure boot

clement22 — Tue, 02 Jul 2019 15:47:41 GMT

Hello,

I have a question about implementing the secure boot on the imx8m mini evaluation kit (on eMMC).

I'm using the YOCTO BSP imx-4.14.98-2.0.0_ga and I'm able to build an image for the eMMC.
In my deploy folder I can see the bootloader file "imx-boot-imx8mmevk-emmc.bin".

I looked at the documentation to implement secure boot on the imx8:

mx8m_mx8mm_secure_boot.txt\guides\habv4\imx\doc - uboot-imx - i.MX U-Boot

To sign my bootloader, I have to edit a CSF file and add the addresses/sizes of the different blocks of my bootloader.
The documentation uses the imx-mkimage build log to get these addresses/sizes. In my case I don't have this build log.

Do you know where to find this bootloader build log ?

Also, do I have to manually sign the bootloader image manually every time or can YOCTO do it for me ?

Thank you

Re: IMX8M YOCTO how to sign image to secure boot

igorpadykov — Tue, 02 Jul 2019 23:15:27 GMT

Hi Clement

one can look on below link, also some files were sent via mail.

iMX8M HAB

Best regards
igor
-----------------------------------------------------------------------------------------------------------------------
Note: If this post answers your question, please click the Correct Answer button. Thank you!
-----------------------------------------------------------------------------------------------------------------------

Re: IMX8M YOCTO how to sign image to secure boot

clement22 — Fri, 05 Jul 2019 12:59:04 GMT

Hi,

Thank you for the document. Its useful, there are more details about the signing and boot procedure.

From what I understand the signing has to be made manually.

Re: IMX8M YOCTO how to sign image to secure boot

malays — Fri, 26 Jun 2020 13:17:57 GMT

Hello Igor,

I am working with IMX8M MINI development board.

I want to develop secure boot feature for this board. I went through the links you shared.

Can you send some other reference files for the same which helps to implement the secure boot feature?

Re: IMX8M YOCTO how to sign image to secure boot

igorpadykov — Sat, 27 Jun 2020 05:39:20 GMT

Hi Malay

one can look at

habv4\imx\doc - uboot-imx - i.MX U-Boot

Best regards
igor