SECURE BOOT IMX8MP

xae-abhishek — Thu, 14 Aug 2025 13:57:03 GMT

While implementing Secure Boot on an i.MX8MP-based device, we thoroughly tested using hab_status. Everything worked as expected—no HAB events were reported. We ran tests over 10 times with different image-signing setups and consistently saw no HAB events when the image was properly signed (we did see events when the image was unsigned).

After finalizing the setup, we closed the device. However, with the same device and the exact same signed image, the boot image started getting rejected.
If there had been an issue with image signing or SRK keys, it should have been reflected in hab_status, but there were no such errors during testing.

I’m attaching our Secure Boot rejection logs:

SPL_ONLY.txt – Default configuration without FIT image optional configs
SPL_FIT.txt – With FIT image optional configs and csf_fit.txt

Re: SECURE BOOT IMX8MP

Harvey021 — Fri, 15 Aug 2025 03:57:58 GMT

Hi @xae-abhishek

I've already replied back to you in another ticket from you. Please let me know if any from there.

Regards

Harvey

topic Re: SECURE BOOT IMX8MP in i.MX Processors

SECURE BOOT IMX8MP

Re: SECURE BOOT IMX8MP