https://community.nxp.com/t5/i-MX-Processors/Secure-boot-fails-when-upgrade-u-boot/m-p/1334337#M179517 <P>Hi experts,</P><P>I am having a device based on IMX6ULG3 that works well with secure boot from u-boot-imx_2016-03 and linux 4.1.15. HAB tree of keys and certificates were generated, signing scripts, csf templates were generated. They all work great with u-boot-imx_2016-3.</P><P>Because of security, I am upgrading u-boot-imx_2016-03 to u-boot-imx_2020-04 along with linux 5.4.70. U-boot works find in non-secure boot. Using the same cst tool, certificates, scripts, templates... to sign u-boot-imx_2020-04, but secure boot fails with HAB_INV_CERTIFICATE. Could you help me to address the issue? Thank you very much</P><P>CONFIG_IMX_HAB=y</P><P>CONFIG_CSF_SIZE=0x2000 (0x2060 as default does not work either)</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="tuyennguyen_0-1630614599502.png" style="width: 400px;"><img src="https://community.nxp.com/t5/image/serverpage/image-id/154992i11E18506B713D283/image-size/medium?v=v2&amp;px=400" role="button" title="tuyennguyen_0-1630614599502.png" alt="tuyennguyen_0-1630614599502.png" /></span></P><P>&nbsp;</P> Thu, 02 Sep 2021 20:32:18 GMT tuyennguyen 2021-09-02T20:32:18Z https://community.nxp.com/t5/i-MX-Processors/Secure-boot-fails-when-upgrade-u-boot/m-p/1334337#M179517 <P>Hi experts,</P><P>I am having a device based on IMX6ULG3 that works well with secure boot from u-boot-imx_2016-03 and linux 4.1.15. HAB tree of keys and certificates were generated, signing scripts, csf templates were generated. They all work great with u-boot-imx_2016-3.</P><P>Because of security, I am upgrading u-boot-imx_2016-03 to u-boot-imx_2020-04 along with linux 5.4.70. U-boot works find in non-secure boot. Using the same cst tool, certificates, scripts, templates... to sign u-boot-imx_2020-04, but secure boot fails with HAB_INV_CERTIFICATE. Could you help me to address the issue? Thank you very much</P><P>CONFIG_IMX_HAB=y</P><P>CONFIG_CSF_SIZE=0x2000 (0x2060 as default does not work either)</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="tuyennguyen_0-1630614599502.png" style="width: 400px;"><img src="https://community.nxp.com/t5/image/serverpage/image-id/154992i11E18506B713D283/image-size/medium?v=v2&amp;px=400" role="button" title="tuyennguyen_0-1630614599502.png" alt="tuyennguyen_0-1630614599502.png" /></span></P><P>&nbsp;</P> Thu, 02 Sep 2021 20:32:18 GMT https://community.nxp.com/t5/i-MX-Processors/Secure-boot-fails-when-upgrade-u-boot/m-p/1334337#M179517 tuyennguyen 2021-09-02T20:32:18Z https://community.nxp.com/t5/i-MX-Processors/Secure-boot-fails-when-upgrade-u-boot/m-p/1339630#M180036 <P>Hi Carrie</P> <P>&nbsp;</P> <P>answer from team:</P> <P>---------------</P> <P><SPAN>Please let customer share us the csf file and all the binaries for both version. It seems like that the IVT header part is invalid.&nbsp;</SPAN></P> <P>---------------</P> <P>Best regards<BR />igor</P> <P>&nbsp;</P> Tue, 14 Sep 2021 07:41:36 GMT https://community.nxp.com/t5/i-MX-Processors/Secure-boot-fails-when-upgrade-u-boot/m-p/1339630#M180036 igorpadykov 2021-09-14T07:41:36Z