Hello,
I'm currently working with S32K314 microcontroller, using S32K344_0_2_55_0 HSE with AB swap configuration.
I'm trying to import a AES CMAC key using service HSE_SRV_ID_IMPORT_KEY and it always return HSE_SRV_RSP_INVALID_PARAM. My current microcontroller state is:
- Lifecycle = CUST_DEL (0x04)
- INSTALL_OK = 0
I've try to create a custom AES catalogue. This request generates an error error HSE_SRV_RSP_NOT_ALLOWED 0xAA55A21.
I've make sure that all the buffers that parsed to HSE are located inside SRAM.
I even manage to run the erase service. It respond ok.
Given all the above I sill end up in HSE_SRV_RSP_INVALID_PARAM error.
Any idea what I could check next?
Thank you in advance!
Hello @lukaszadrapa .
Thank you for the quick response.
I've tried to installed the key catalogue with a minimal configuration, but it was not successful. It respond with HSE_SRV_RSP_NOT_ALLOWED.
This is my catalogue configuration.
Any tips on what I could check next?
Thank you in advance!
Hi @CosminSbera
If HSE_STATUS_INSTALL_OK is ‘0’, the catalogs are not formatted, so you can’t import a key.
How did you configured the catalogs?
Take a look at description of hseFormatKeyCatalogsSrv_t structure in HSE Service API reference manual:
c:\NXP\HSE_FW_S32K344_0_2_55_0\docs\S32K3X4_HSE_Service_API_Reference_Manual.pdf
There’s a list of requirements which need to be met.
And take a look at section “6.1.5.3 Key catalog formatting” in HSE firmware reference manual rev. 2.7. There’s a list of reasons why the formatting may fail.
Regards,
Lukas
The problem was indeed the content of the key catalogue!
Regards,
Cosmin
All groups in RAM catalog must use owner HSE_KEY_OWNER_ANY. You can’t use HSE_KEY_OWNER_CUST here.
All groups in NVM catalog must use owner HSE_KEY_OWNER_CUST or HSE_KEY_OWNER_OEM. But HSE_KEY_TYPE_SHE is an exception – this must be HSE_KEY_OWNER_ANY also in NVM catalog.
Regards,
Lukas