topic Re: What is SP Blank ARIK/SE Blank ARIK? And what's the differences between SP and SE? in i.MX Processors

What is SP Blank ARIK/SE Blank ARIK? And what's the differences between SP and SE?

john_li2 — Fri, 09 Oct 2020 03:09:11 GMT

Fail to download image to MCIMX6D6AVT08AD, as checked, the failures are all recognize as SP Blank ARIK device. And for SE Blank ARIK all, are OK to download. Could anyone can tell me what's SE/SP blank ARIK means? And what's the differences between SE and SP?

Issue descripe as below:

Picture 1: Downloading are pending in "Jumping to OS image" status

Picture 2: Fail IC are all recognized as SP Blank ARIK

Picture 3: SE Blank ARIK device are all OK.

For SP Blank ARIK devices, it also fail in NXP DDR matching test, and for SE Blank ARIK devices are OK to download, show as below:

Re: What is SP Blank ARIK/SE Blank ARIK? And what's the differences between SP and SE?

igorpadykov — Fri, 09 Oct 2020 05:18:54 GMT

Hi john_li2

" SP' - Security Production, the same as HYBE_TYPE_PDODUCT:
fuse SEC_CONFIG[1:0] - 1x—Closed (The program image executes
only if authenticated)

"SE" Security Engineering
SEC_CONFIG[1:0] - 01—Open (allows any program image,
even if the authentication fails)

described in Table 8-2. Boot eFUSE descriptions

i.MX 6Dual/6Quad Applications Processor Reference Manual

Best regards
igor

Re: What is SP Blank ARIK/SE Blank ARIK? And what's the differences between SP and SE?

john_li2 — Sat, 10 Oct 2020 06:43:02 GMT

Hi Igor,

Do you mean we need authentication for the "SP" version before download? Is there anyway to download the image without authentication?

If not, which tool can be used for the authentication? IMX_CST_TOOL or other?

Re: What is SP Blank ARIK/SE Blank ARIK? And what's the differences between SP and SE?

igorpadykov — Sat, 10 Oct 2020 10:50:24 GMT

Hi john_li2

>Do you mean we need authentication for the "SP" version before download?

yes

>Is there anyway to download the image without authentication?

>If not, which tool can be used for the authentication? IMX_CST_TOOL or other?

yes IMX_CST_TOOL is used for creating security image. For details please refer

to Encrypted Boot on HABv4 and CAAM Enabled Devices

https://boundarydevices.com/high-assurance-boot-hab-dummies/

Best regards
igor