i.MX ProcessorsのトピックRe: Reprogramming the SRK_HASH bank in imx6

Reprogramming the SRK_HASH bank in imx6

rakesh3 — Mon, 10 Apr 2023 07:02:42 GMT

Hi team,

I am trying to reprogram the SRK_HASH bank but not able to reprogram this.

I tried with =>fuse override 3 0 <hex> but this also didn't work and getting old values on reboot.

Could you please guide me, how to reprogram imx6d with different key so that we can use other device to check secure boot with other key.

Regards,

Harvey021 — Tue, 11 Apr 2023 03:25:49 GMT

Please note, Once the SRK Hash has been programmed we can't reprogram it, which we operate on an OTP.

Best regards

Harvey

rakesh3 — Wed, 12 Apr 2023 06:06:36 GMT

Thanks for reply ,

SO it means we can't test the secure boot in that board further.

Regards,

Harvey021 — Wed, 12 Apr 2023 09:49:08 GMT

No, you can't test secure boot due to failing to establish root of trust.

Best regards

Harvey

mason2036 — Thu, 13 Apr 2023 00:43:36 GMT

This is my understanding.

fuse override is for test purpose. Could be used before you really burn the fuse.

If you read the source code, you can find

fuse override means temporarily change the OTP shadow register, which makes override the value read from OTP fuse in shadow register before.

That is why it calls override. not overwrite.

You just test in this power cycle, if you test in another power cycle, it will read from OTP fuse again.

BTW, I should also say, OTP fuse only can write once. It could be not overwritten.

NXP expert,

Question from rakesh3 is override, not overwrite.

Like the following link, I could not believe you really understand the question.