topic Re: HAB authentication Faild in i.MX Processors

HAB authentication Faild

adrian_dusinski — Thu, 09 Jul 2020 10:45:35 GMT

I upload signed uboot image to device, program SRK and closed the device with trustfence.

After boot I get error:

Loading file 'boot.scr' to addr 0x8000000...

Done

Autenticating image from DDR location 0x808000000... FAILED!

Secure boot enabled

HAB Configuration: 0xcc, HAB State:0x99

I upload my zimage to ram and check hab_auth_img 80a000000 0x0400 and again get Autenticating image from DDR

location 0x808000000... FAILED!

HAB Event 1

event data:

0xdv 0x00 0x08 0x42 0x33 0x29 0xe1 0x00

HAB Event 1

event data:

0xdb 0x00 0x2c 0x42 0x33 0x30 0xe1 0x1e

0x00 0x00 0x00 0x00 0x80 0x00 0xb3 0x00

0x80 0x00 0x20 0x01 0x00 0x00 0x00 0x20

0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00

0x00 0x00 0x00 0x08 0x00 0x00 0x00 0x00

0x00 0x00 0x00 0x00

Where I can find information about this event? In Secure Boot on i.MX 50, i.MX 53, i.MX 6 and i.MX 7 Series using HABv4?

It's mean that SRK public key saved in device and private key in image do not match?

Regards,

Adrian

Update:

Ok, I try boot secure images with "open device" without secure boot enabled.

After loading boot.src to ram i get Bad data crc.

I try the same images without trustfence and it's works.

Why it happens?

Re: HAB authentication Faild

Yuri — Fri, 10 Jul 2020 08:02:54 GMT

adrian.dusinski@evatronix.com

Hello,

What U-boot and Linux release are used here?

Regards,

Yuri.

Re: HAB authentication Faild

adrian_dusinski — Fri, 10 Jul 2020 08:06:43 GMT

Linux version 4.14

uboot v2017.03

yocto 2.6

Regards,

Adrian

Update:

When I try skip boot.scr I get response:

## Flattened Device Tree blob at 8300000

Booting using the fdt blob at 0x8300000

Using Device Tree in place at 8300000, end 8300b55a

fdt_find_or_add_subnode: chosen: FDT_ERR_BADSTRUCTURE

ERROR: /chosen node create failed

- must RESET the board....

Re: HAB authentication Faild

Yuri — Wed, 15 Jul 2020 13:11:27 GMT

adrian.dusinski@evatronix.com

Hello,

I 've sent You example. Hope it helps.

Regards,

Yuri.

Re: HAB authentication Faild

adrian_dusinski — Wed, 15 Jul 2020 14:22:22 GMT

Very thank you for examples.

I'll read this and let you know if it's working.

Regards,

Adrian