i.MX ProcessorsのトピックRe: HAB on Nitrogen_6X IMX6Q board

HAB on Nitrogen_6X IMX6Q board

veezhi — Sat, 16 Feb 2013 04:54:43 GMT

I am trying to get HAB configured on Nitrogen_6X IMX6Q SOM board from boundary devices.

The board allows u-boot through NOR-Flash or USB. We use the freescale u-boot code as that has HAB features enabled.

The IMX6q allows secure boot only in "Closed" state.

The fusing of SRK key has happened fine. The signed image is not getting authenticated.

The examples for saberlite use the SD card as the boot media from which it reads the u-boot image.

Just to know if any one of you have configured secure boot through NOR Flash or USB.

Re: HAB on Nitrogen_6X IMX6Q board

admin — Fri, 19 Apr 2013 22:42:55 GMT

TroyKisky, pejmankalkhoran, EricNelson at Boundary Devices - can you help with this question? Thanks.

Re: HAB on Nitrogen_6X IMX6Q board

EricNelson — Fri, 19 Apr 2013 23:38:40 GMT

Hi Grant,

While we haven't walked through this process, I believe veezhi has been successful in getting this to work.

Kamakoti, can you confirm?

Re: HAB on Nitrogen_6X IMX6Q board

veezhi — Fri, 19 Apr 2013 23:52:36 GMT

Yes, we have been successful in getting HAB TO work on nitrogen 6x SOM. I

have created a documentation which I shall forward to eric for uploading in

relevant forums.

Regards

Kamakoti

On 20 Apr 2013 05:08, "Eric Nelson" <eric.nelson@boundarydevices.com>

Re: HAB on Nitrogen_6X IMX6Q board

EricNelson — Sat, 20 Apr 2013 00:06:26 GMT

Thanks for sharing this Kamakoti.

Nicely done!

Re: HAB on Nitrogen_6X IMX6Q board

admin — Sun, 21 Apr 2013 21:23:17 GMT

Eric and Kamakoti - thanks much for your quick response and valuable input!

Re: HAB on Nitrogen_6X IMX6Q board

MickeyI — Wed, 26 Jun 2013 11:00:11 GMT

Great document, thanks!

I have a question in regard to what's been written about using u-boot 2013. The document says there's no support for secure boot on u-boot 2013. I can see the binary looks very different from the 2009-08 that comes with freescale's BSP.

(For example, I can't find an IVT like struct at offset 0x400 in the binary file).

Has anything changed recently in that regard? Is it possible to do Secure Boot on 2013? From what I looked up, there are many changes that boundary devices did in their u-boot branch, but I couldn't find any reference to HAB.

I'd appreciate any comments on that.

Re: HAB on Nitrogen_6X IMX6Q board

AlbertT — Thu, 27 Jun 2013 07:00:30 GMT

Hello Mickey,

That's just my theory, but I guess the u-boot 2013 will be merged with freescale u-boot that implements HAB, it should happen in the next release in August. If someone from Freescale could confirm that.

Re: HAB on Nitrogen_6X IMX6Q board

dhanunjaykatta — Tue, 08 Sep 2015 14:28:28 GMT

Hi Eric,

I have a doubt on IMX6 secure boot flow, Can we able to authenticate bare-metal application flow (BootROM--->Bootloader--->RTOS-->APP)in this flow how can i create signed images?

Is there any way without burn the key to efuse, while in development?