https://community.nxp.com/t5/i-MX-Processors/Anti-Rollback-Implementation-Options-for-i-MX6ULZ/m-p/2110699#M237901 <P>Hi,<BR /><BR /></P><P>I'm looking for anti-rollback implementation on i.MX6ulz. My understanding is that I cannot use bootROM for that because it is fixed in silicon and I couldn't find suitable registers I can use to increment versions to compare with. What options do I have?</P><P>Key considerations:</P><UL><LI>Need reliable version tracking mechanism</LI><LI>Prevent firmware downgrade</LI><LI>Secure method of version comparison</LI></UL><P>While OCOTP Fuse Banks seem promising, they are limited to only 4 version upgrades, which is insufficient for long-term product lifecycle management.</P><P>One potential approach could be implementing version checking directly in the bootloader, where the firmware image includes a version identifier that can be compared during the boot process.</P><P>Specific questions:</P><UL><LI>How can I implement a secure version comparison mechanism?</LI><LI>What are the recommended methods for preventing firmware downgrades?</LI><LI>Are there any NXP-recommended best practices for version tracking on i.MX6ULZ?</LI></UL><P>Any recommendations or best practices would be greatly appreciated.<BR /><BR />Thank you.<BR />Lenny Tochinski<BR />Amazon</P> Wed, 04 Jun 2025 20:32:19 GMT ltoch 2025-06-04T20:32:19Z https://community.nxp.com/t5/i-MX-Processors/Anti-Rollback-Implementation-Options-for-i-MX6ULZ/m-p/2110699#M237901 <P>Hi,<BR /><BR /></P><P>I'm looking for anti-rollback implementation on i.MX6ulz. My understanding is that I cannot use bootROM for that because it is fixed in silicon and I couldn't find suitable registers I can use to increment versions to compare with. What options do I have?</P><P>Key considerations:</P><UL><LI>Need reliable version tracking mechanism</LI><LI>Prevent firmware downgrade</LI><LI>Secure method of version comparison</LI></UL><P>While OCOTP Fuse Banks seem promising, they are limited to only 4 version upgrades, which is insufficient for long-term product lifecycle management.</P><P>One potential approach could be implementing version checking directly in the bootloader, where the firmware image includes a version identifier that can be compared during the boot process.</P><P>Specific questions:</P><UL><LI>How can I implement a secure version comparison mechanism?</LI><LI>What are the recommended methods for preventing firmware downgrades?</LI><LI>Are there any NXP-recommended best practices for version tracking on i.MX6ULZ?</LI></UL><P>Any recommendations or best practices would be greatly appreciated.<BR /><BR />Thank you.<BR />Lenny Tochinski<BR />Amazon</P> Wed, 04 Jun 2025 20:32:19 GMT https://community.nxp.com/t5/i-MX-Processors/Anti-Rollback-Implementation-Options-for-i-MX6ULZ/m-p/2110699#M237901 ltoch 2025-06-04T20:32:19Z