topic Re: Unknown SECO event on IMX8.QM in i.MX Processors

Unknown SECO event on IMX8.QM

ddroe — Wed, 13 Oct 2021 07:17:44 GMT

Hi,

we're encountering the SECO event 0x00DAF429 on all our IMX8.QM boards. This is the U-Boot output:

=> ahab_status Lifecycle: 0x0020, NXP closed SECO Event[0] = 0x00DAF429 sc_seco_get_event: idx: 1, res:3

I could not find any documentation of that event. It occurs independently of key fuses being burnt or not.

I also supsect it to prevent us from closing the device since:

=> ahab_close Warning: Please ensure your sample is in NXP closed state, OEM SRK hash has been fused, and you are able to boot a signed image successfully without any SECO events reported. If not, your sample will be unrecoverable. Really perform this operation? <y/N> y sc_seco_forward_lifecycle: change:16, res:11 Error in forward lifecycle to OEM closed exit not allowed from main input shell.

If anyone knows what the event means and how it needs to be handled, that would be of great help. Thank you!

Cheers,

David

Re: Unknown SECO event on IMX8.QM

Yuri — Tue, 19 Oct 2021 05:19:53 GMT

@ddroe
Hello,

have You followed recommendations of U-boot help, regarding secure image building
and deployment?

https://source.codeaurora.org/external/imx/uboot-imx/tree/doc/imx/habv4/guides?h=imx_v2020.04_5.4.70_2.3.0

Regards,
Yuri.

Re: Unknown SECO event on IMX8.QM

ddroe — Tue, 19 Oct 2021 07:26:53 GMT

Hello,

thank you for your reply. We followed

https://source.codeaurora.org/external/imx/uboot-imx/tree/doc/imx/ahab/guides/mx8_mx8x_secure_boot.txt?h=imx_v2020.04_5.4.70_2.3.0

since the IMX8.QM uses AHAB (in contrast to HABv4).

Regards,
David

Re: Unknown SECO event on IMX8.QM

seb_haezebrouck — Tue, 19 Oct 2021 08:29:42 GMT

Hi David,

Which version of SCFW / SECO FW are you using ?

If you have a pending SECO event, the SECO will refuse to close your part.

Best regards,

Seb

Re: Unknown SECO event on IMX8.QM

ddroe — Tue, 19 Oct 2021 11:28:28 GMT

Hi Seb,

it's

SCFW bc122ee1, SECO-FW d63fdb21, IMX-MKIMAGE 8947fea3, ATF 2a26786

Regards,

David

Re: Unknown SECO event on IMX8.QM

seb_haezebrouck — Tue, 19 Oct 2021 13:21:14 GMT

OK - this means: SECO FW QM B0 revision 3.7.4, SCFW revision 2020q4_p3.

You should move to SECO FW 3.8.1 / SCFW 2020q4_p4 at least, if you are using Linux 5.4.70_2.3.x release (e.g. switch to Linux 5.4.70_2.3.4).

This is available from nxp.com: SCFW porting kit version 1.7.4.

From the SCFW 2020q4_p4 release notes (included in SCFW 1.7.4 porting kit):

Regards,

Seb

Re: Unknown SECO event on IMX8.QM

ddroe — Tue, 19 Oct 2021 12:42:35 GMT

Ok, thanks for the hint, I'll try a more recent FW.

Re: Unknown SECO event on IMX8.QM

ddroe — Thu, 21 Oct 2021 07:06:06 GMT

Successfully tested closing the device with a more recent FW. Thanks again!

Re: Unknown SECO event on IMX8.QM

ddroe — Thu, 21 Oct 2021 12:33:37 GMT

Maybe I should add that the problem was not caused by an outdated SECO-FW but either by an outdated SCFW or the combination of SECO-FW and SCFW. We have used the same SECO-FW in both attempts but only with a more recent SCFW, closing the device succeeded.