2387562_en-US

[#1]

[i.MX95] How to Change Lifecycle to OEM_CLOSED for Secure Boot on i.MX95 Rev.C

We are working on enabling Secure Boot on an i.MX95 Rev.C hardware platform. We need to change the lifecycle state to OEM_CLOSED to lock down the bootloader and enable secure boot.

Could you please provide guidance on:

1. The proper procedure to transition the lifecycle to OEM_CLOSED on i.MX95 Rev.C?
2. Any prerequisites or dependencies needed before making this change?

Any documentation, examples, or best practices would be greatly appreciated.

Thank you.

Re: [i.MX95] How to Change Lifecycle to OEM_CLOSED for Secure Boot on i.MX95 Rev.C

Please find the secure boot guide here : https://github.com/nxp-imx/uboot-imx/blob/lf-6.18.20-2.0.0/doc/imx/ahab/guides/mx8ulp_9x_secure_boot...

Re: [i.MX95] How to Change Lifecycle to OEM_CLOSED for Secure Boot on i.MX95 Rev.C

We have followed the guide and following uboot command was used to set fuse values but values were not applied properly when read

panchalprakrit_0-1782821101501.png

We want to ask if there is any other way for changing lifecycle in Rev C board in GM CHM. Since, fuse prog seems to not work with uboot console.

Re: [i.MX95] How to Change Lifecycle to OEM_CLOSED for Secure Boot on i.MX95 Rev.C

Sorry, the link provided before doesn't contain AHAB 2.0, please ignore that.

Here are the  SPSDK docs for enabling AHAB on i.MX95 Rev.C:

 https://spsdk.readthedocs.io/en/latest/examples/ahab/imx95/imx95_ahab_uboot.html