i.MX ProcessorsのトピックRe: HAB status reports event

HAB status reports event

mohamed-ali_fod — Tue, 08 Jun 2021 09:34:41 GMT

Hello,

I am using u-boot 2019.04 with kernel 4.19.35 and i.MX6, I have the following HAB event kernel authentication issue could you please let me know what could be the problem?

Authenticate image from DDR location 0x10007fc0...

Secure boot disabled

HAB Configuration: 0xf0, HAB State: 0x66

--------- HAB Event 1 -----------------
event data:
0xdb 0x00 0x24 0x42 0x69 0x30 0xe1 0x1d
0x00 0x04 0x00 0x02 0x40 0x00 0x36 0x06
0x55 0x55 0x00 0x03 0x00 0x00 0x00 0x00
0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00
0x00 0x00 0x00 0x01

STS = HAB_WARNING (0x69)
RSN = HAB_ENG_FAIL (0x30)
CTX = HAB_CTX_ENTRY (0xE1)
ENG = HAB_ENG_CAAM (0x1D)

Re: HAB status reports event

igorpadykov — Tue, 08 Jun 2021 11:19:05 GMT

Hi Mohamed

this may be casued by rng issue described on

https://community.nxp.com/t5/i-MX-Processors/Secure-boot-issue-for-i-MX6DL-custom-board/m-p/1086081

Best regards
igor

Re: HAB status reports event

mohamed-ali_fod — Tue, 08 Jun 2021 13:22:32 GMT

Hi Igor,

Below is an extract of my CSF file, but I still have the same fail:

[Header]
Version = 4.2
Hash Algorithm = sha256
Engine Configuration = 0
Certificate Format = X509
Signature Format = CMS
Engine = ANY

[Unlock]
Engine = CAAM
Features = RNG

I tried also the following config:

[Header]
Version = 4.2
Hash Algorithm = sha256
Engine Configuration = 0
Certificate Format = X509
Signature Format = CMS
Engine = CAAM

[Unlock]
Engine = CAAM
Features = RNG

Best Regards