topic Re: How to create an encrypted rootfs for iMX8MQ using yocto in i.MX Processors

How to create an encrypted rootfs for iMX8MQ using yocto

ranjitsinh_rathod — Thu, 25 Feb 2021 06:17:20 GMT

Hi there,

I am using iMX8MQ based custom board and I want to encrypt rootfs. Is there any guide//document for this to implement in yocto to create sdcard image with encrypted rootfs?

I am using 5.4-zeus version.

Many thanks in advance.

Regards,

Ranjitsinh Rathod

Re: How to create an encrypted rootfs for iMX8MQ using yocto

Yuri — Thu, 25 Feb 2021 07:14:08 GMT

@ranjitsinh_rathod
Hello,

Only the following documents are available now.

“i.MX Encrypted Storage Using CAAM Secure Keys”

https://www.nxp.com/docs/en/application-note/AN12714.pdf

Section 10.5 (Disk encryption acceleration) in “i.MX_Linux_Users_Guide.pdf”

https://www.nxp.com/docs/en/user-guide/IMX_LINUX_USERS_GUIDE.pdf

Regards,
Yuri.

Re: How to create an encrypted rootfs for iMX8MQ using yocto

ranjitsinh_rathod — Fri, 26 Feb 2021 11:29:01 GMT

Thanks, Yuri for sharing the details.

I have tried to follow the steps and facing an issue during the step where keys are not able to generate using the caam-keygen utility.

When I'm trying to send the command below which is giving an error.

root@mymachine:~# ./caam-keygen create fromTextkey ecb -t 0123456789abcdef
Unable to open device /dev/caam-keygen

My kernel version is 5.4.3-lts-lf-5.4.y+gf8118585ee3c.

Can you please suggest what could be the issue?

Many Thanks,

Ranjitsinh

Re: How to create an encrypted rootfs for iMX8MQ using yocto

Yuri — Fri, 05 Mar 2021 10:09:07 GMT

@ranjitsinh_rathod
Hello,

perhaps the following helps:

https://community.nxp.com/t5/i-MX-Processors/CAAM-Black-Blob-Implementation-on-i-MX8/m-p/1196962

Regards,
Yuri.