topic imx8m plus HAB in i.MX Processors

imx8m plus HAB

splkwill — Thu, 20 Oct 2022 15:53:04 GMT

Hello,

I have an imx8m plus device where I would like to enable secure boot for our Yocto image. I'm trying to understand the process here. Currently I am reading AN4581 and have a couple of questions.

For the process outlined in AN4581, does this only sign the output image generated by Yocto, but we would need to extend the root trust to other software components (like Uboot, etc...)

Also, for the SRK table, is there a minimum number of certificates we need to supply? Is three the recommended?

Thanks

Re: imx8m plus HAB

splkwill — Fri, 21 Oct 2022 17:39:54 GMT

Hi, just reading the application note over again and I got my questions answered.

Re: imx8m plus HAB

hrlawrence — Sat, 04 Mar 2023 01:23:53 GMT

Hi,
I am having the similar requirement to secure the first stage bootloader, u-boot and linux kernel with the yocto build could you please share the required documents

Thanks
Lawrence