secure boot imx8mp

[xae-abhishek]

Hi all,

We are working on enabling Secure Boot on an i.MX8MP-based device and have made good progress so far. We're using NXP’s Code Signing Tool (CST) version 4.0.0 and following the official NXP Secure Boot guide.

By default, the provided csf_spl.txt and csf_fit.txt configurations use the SRK1, CSF1, and IMG1 keys, which work as expected. However, we want to switch to using SRK2 / CSF2 / IMG2 to sign our flash.bin.

I attempted to modify the CSF configuration files to use SRK2/CSF2/IMG2, but I haven’t been able to get it working correctly.

Could someone please help guide me on the correct configuration for csf_spl.txt and csf_fit.txt to enable signing with SRK2, CSF2, and IMG2?

I’ve attached the NXP guide as well as our current csf_spl.txt and csf_fit.txt files for reference.

Any assistance would be greatly appreciated!
IMX8MPLUS 
IMX93 - AHAB SecureBoot - SRK TABLE 
S32K344 secureBoot 

Thank you,
Abhishek

[ktim_chen]

Hi,

I encountered the same issue. How can I fix it?

Thank you,

[Harvey021]

Hi @ktim_chen 

Please create a Support Tickets with sharing csf files and keys generation.

Regards

Harvey

[Harvey021]

Hi,

Already reply to you in another ticket from you. Please let me know if any persists over there.

Regards

Harvey