topic Re: Trouble activating HAB for i.MX8 in i.MX Processors

Trouble activating HAB for i.MX8

jclsn — Wed, 31 Aug 2022 07:35:05 GMT

I have trouble activating the IMX_HAB feature. I get an

undefined reference to `sec_init'

but FSL_CAAM is active. I have tried to search for alle dependencies in menuconfig and after activating a SPL_CRYPTO_SUPPORT, I could finally build. But then when running U-Boot I get

Error binding driver 'caam_jr': -96 Some drivers failed to bind Error binding driver 'simple_bus': -96 Some drivers failed to bind Error binding driver 'simple_bus': -96 Some drivers failed to bind

Can you please list the needed features HAB depends on?

Re: Trouble activating HAB for i.MX8

Harvey021 — Thu, 01 Sep 2022 09:54:01 GMT

Hi @jclsn

Please find the link for all references.

guides\ahab\imx\doc - uboot-imx - i.MX U-Boot (codeaurora.org)

for example,

1.2 Preparing U-Boot to support AHAB secure boot features
----------------------------------------------------------

The U-Boot provides an alternative SPL target for i.MX8 and i.MX8x devices. The
SPL is intended to be used by applications that requires a initial bootloader
prior to initialize the ARM Trusted Firmware (ATF) and the U-Boot proper.

The U-Boot support AHAB functions that are essential to completely authenticate
the flash.bin image. On SPL targets only the SCFW, SPL and M4 IMG are
authenticated at SCU ROM level, in order to authenticate the ATF and U-Boot
proper it's necessary to call the SCU API sc_misc_seco_authenticate() function
at SPL level.

The support is enabled by adding CONFIG_AHAB_BOOT to the defconfig file used
by your target:

  - Defconfig:
    CONFIG_AHAB_BOOT=y
  - Kconfig:
    ARM architecture -> Support i.MX 8 AHAB features

Best regards

Harvey

Re: Trouble activating HAB for i.MX8

Bill-James-Ellis — Thu, 21 Nov 2024 10:43:09 GMT

Hi,

We are using the Vendor fork for maaxboard_v2020.04_5.4.24_2.1.0 and experience exactly the same as above!

Just "CONFIG_AHAB_BOOT=y" fails to build ("undefined reference to `sec_init'") and adding the extra configs as listed above ("CONFIG_SPL_CRYPTO_SUPPORT=y") achieves a build, but at execution we also see:

Error binding driver 'caam_jr': -96 Some drivers failed to bind Error binding driver 'simple_bus': -96 Some drivers failed to bind Error binding driver 'simple_bus': -96 Some drivers failed to bind

We've raised this as a separate query: IMX8M-High-Assurance-Boot-HAB-failing-with-CAAM-error

But, since you have faced exactly the same, was wondering if you have any clues or guidance on how to fix this?