topic Re: Question about NAND bad block scanning and DBBT generation during provisioning in i.MX RT Crossover MCUs

Question about NAND bad block scanning and DBBT generation during provisioning

Nexus76 — Mon, 09 Mar 2026 15:28:47 GMT

Hello,

I am working with an i.MX RT1171 booting from SEMC NAND and I am using the Secure Provisioning Tool / Manufacturing Tool to program the boot image.

During the provisioning process the tool loads the flashloader and programs the image into the NAND. However, I would like to better understand how the DBBT (Discovered Bad Block Table) is generated.

My question is:

During programming with the Provisioning Tool (or Manufacturing Tool), is the NAND scanned for bad blocks and is the DBBT automatically generated/updated before writing the boot image?

In other words, does the flashloader perform something like:

NAND initialization
scan of NAND blocks to detect bad blocks
creation/update of the DBBT structure
writing of FCB and DBBT
writing of the boot image

Or is the DBBT expected to already exist in the NAND or inside the boot image?

I am trying to understand if the provisioning process automatically rebuilds the DBBT or if it must be generated separately.

Thank you very much for your help.

Best regards
Ernesto Schianchi

Re: Question about NAND bad block scanning and DBBT generation during provisioning

martin_lapis — Tue, 10 Mar 2026 09:51:32 GMT

Hello @Nexus76

If you’re interested in the details of DBBT table management, take a deep dive into the i.MX RT flashloader sources and search for the DBBT pattern. The way the flashloader processes the DBBT is similar to how BRC is handled. You can find the flashloader sources under evkbimxrt1170_flashloader_cm7 in the SDK package. There is also a CM4 port available.
I believe you’ll find useful information in
/evkbimxrt1170_flashloader_cm7/source/src/memory/src/semc_nand_memory.c,
but it’s worth checking the other SEMC NAND–related files as well.

Best regards,
Martin

Re: Question about NAND bad block scanning and DBBT generation during provisioning

Nexus76 — Tue, 10 Mar 2026 10:15:29 GMT

Hi Martin,
very interesting, but I'd like to know how provisioning tool writes FCB and DBBT table, and if scanning NAND before to write bootable image.

BRC what does mean ?

Re: Question about NAND bad block scanning and DBBT generation during provisioning

martin_lapis — Tue, 10 Mar 2026 11:24:00 GMT

Hello @Nexus76

BRC means Boot Rom Code.

SEC provisioning tool does not manage DBBT or FCB. SEC tool just execute flashloader to manage FCB or DBBT. That is why I point you to flashloader sources.

Best Regards.
Martin

Re: Question about NAND bad block scanning and DBBT generation during provisioning

Nexus76 — Tue, 10 Mar 2026 12:46:00 GMT

Hi Martin,
thank for reply, so the SEC only add to bootable image, before writing, the FCB and DBBT tables ?
The BCR does update these tables when write image ?

Re: Question about NAND bad block scanning and DBBT generation during provisioning

martin_lapis — Wed, 11 Mar 2026 09:25:50 GMT

Hello @Nexus76,
Please take a look at the LOG window in the SEC tool. It will help you understand all actions performed by the SEC.
In short: the SEC tool uploads the flashloader into the internal OCRAM memory and executes it. From that point on, all communication is between the SEC tool and the flashloader. In the LOG window, you can observe the actions of the SEC tool (the commands sent to the flashloader).
Pay particular attention to the configure-memory command, where the flash is configured. At this stage, all necessary support operations (such as DBBT checking, etc.) are expected to be performed.
So, check the flashloader sources, find the implementation of the configure-memory command, and you will see what actions the flashloader performs to configure the flash memory.

Best regards,
Martin