HAB problems on the IMX8MP

McCann — Wed, 12 Jul 2023 14:28:02 GMT

HAB Configuration: 0xf0, HAB State: 0x66

--------- HAB Event 1 -----------------
event data:
0xdb 0x00 0x14 0x45 0x33 0x0c 0xa0 0x00
0x00 0x00 0x00 0x00 0x40 0x1f 0xdd 0xc0
0x00 0x00 0x00 0x20

STS = HAB_FAILURE (0x33)
RSN = HAB_INV_ASSERTION (0x0C)
CTX = HAB_CTX_ASSERT (0xA0)
ENG = HAB_ENG_ANY (0x00)

--------- HAB Event 2 -----------------
event data:
0xdb 0x00 0x14 0x45 0x33 0x0c 0xa0 0x00
0x00 0x00 0x00 0x00 0x40 0x1f 0xcd 0xc0
0x00 0x00 0x00 0x04

STS = HAB_FAILURE (0x33)
RSN = HAB_INV_ASSERTION (0x0C)
CTX = HAB_CTX_ASSERT (0xA0)
ENG = HAB_ENG_ANY (0x00)

--------- HAB Event 3 -----------------
event data:
0xdb 0x00 0x34 0x45 0x33 0x18 0xc0 0x00
0xca 0x00 0x2c 0x00 0x02 0xc5 0x1d 0x00
0x00 0x00 0x0b 0x50 0x40 0x1f 0xcd 0xc0
0x00 0x00 0x10 0x20 0x40 0x20 0x00 0x00
0x00 0x0c 0x3f 0x30 0x40 0x2c 0x3f 0x30
0x00 0x00 0xbf 0x20 0x00 0x97 0x00 0x00
0x00 0x00 0xa1 0x50

STS = HAB_FAILURE (0x33)
RSN = HAB_INV_SIGNATURE (0x18)
CTX = HAB_CTX_COMMAND (0xC0)
ENG = HAB_ENG_ANY (0x00)

--------- HAB Event 4 -----------------
event data:
0xdb 0x00 0x34 0x45 0x33 0x18 0xc0 0x00
0xca 0x00 0x2c 0x00 0x02 0xc5 0x1d 0x00
0x00 0x00 0x0b 0x50 0x40 0x1f 0xcd 0xc0
0x00 0x00 0x10 0x20 0x40 0x20 0x00 0x00
0x00 0x0c 0x3f 0x30 0x40 0x2c 0x3f 0x30
0x00 0x00 0xbf 0x20 0x00 0x97 0x00 0x00
0x00 0x00 0xa1 0x50

STS = HAB_FAILURE (0x33)
RSN = HAB_INV_SIGNATURE (0x18)
CTX = HAB_CTX_COMMAND (0xC0)
ENG = HAB_ENG_ANY (0x00)

hello all,

I get these HAB events when tying to secure boot the processor.

looks like there is something wrong with my second stage fit image key judging by the address.

here is the cert file for my second stage fit image

[Install CSFK]
# Key used to authenticate the CSF data
File = "../../crts/CSF1_1_sha256_2048_65537_v3_usr_crt.pem"

[Authenticate CSF]

[Install Key]
# Key slot index used to authenticate the key to be installed
Verification index = 0
# Target key slot in HAB key store where key will be installed
Target index = 2
# Key to install
File = "../../crts/IMG1_1_sha256_2048_65537_v3_usr_crt.pem"

[Authenticate Data]
# Key slot index used to authenticate the image data
Verification index = 2
# Authenticate Start Address, Offset, Length and file
Blocks = 0x401fcdc0 0x60000 0x1020 "imx-boot", \
0x40200000 0x53000 0xC3F30 "imx-boot", \
0x402C3F30 0x116F30 0xBF20 "imx-boot", \
0x970000 0x122E50 0xA150 "imx-boot"

I have not blown any fuses yet, would this make the error go away? as currently you would expect the key to be wrong as it will be comparing against a random set of data in the fuses.

any help would be much appreciated

Re: HAB problems on the IMX8MP

Bio_TICFSL — Thu, 13 Jul 2023 16:03:04 GMT

Hello,

I think the pki tree is not well establish, please read the following thread:

https://community.nxp.com/t5/i-MX-Processors-Knowledge-Base/How-to-enable-HAB-in-i-MX6x/ta-p/1101657

Regards

i.MX Processors中的主题 HAB problems on the IMX8MP

HAB problems on the IMX8MP

Re: HAB problems on the IMX8MP