Hello,
I am working on AHAB secure boot support on i.MX95 and would like to confirm the supported signing-key hierarchy.
I understand that some i.MX9 variants, such as i.MX93, currently do not support subordinate signing keys (SGK) for AHAB container signing, and only SRK-based signing is supported, as discussed here:
https://community.nxp.com/t5/i-MX-Processors/imx93-AHAB-SGK-support/td-p/2181212
Could you please confirm whether i.MX95 supports signing AHAB boot containers using subordinate keys (SGK), with the SRK certificate carrying the CA flag, or whether the current released ELE firmware supports only direct SRK-based signing?
If SGK is supported, could you also clarify whether support depends on the i.MX95 silicon revision, ELE firmware version, AHAB container format, or BSP release?