HSE_SRV_ID_IMPORT_KEY returns HSE_SRV_RSP_INVALID_PARAM 0x55A5A399 on S32k314

[CosminSbera]

Hello,

I'm currently working with S32K314 microcontroller, using S32K344_0_2_55_0 HSE with AB swap configuration.

I'm trying to import a AES CMAC key using service HSE_SRV_ID_IMPORT_KEY and it always return HSE_SRV_RSP_INVALID_PARAM. My current microcontroller state is:

- Lifecycle = CUST_DEL (0x04)

- INSTALL_OK = 0

I've try to create a custom AES catalogue. This request generates an error error HSE_SRV_RSP_NOT_ALLOWED 0xAA55A21.

I've make sure that all the buffers that parsed to HSE are located inside SRAM.

I even manage to run the erase service. It respond ok.

Given all the above I sill end up in HSE_SRV_RSP_INVALID_PARAM  error.

Any idea what I could check next?

Thank you in advance!

[lukaszadrapa]

Hi @CosminSbera 

If HSE_STATUS_INSTALL_OK is ‘0’, the catalogs are not formatted, so you can’t import a key.

How did you configured the catalogs?

Take a look at description of hseFormatKeyCatalogsSrv_t structure in HSE Service API reference manual:

c:\NXP\HSE_FW_S32K344_0_2_55_0\docs\S32K3X4_HSE_Service_API_Reference_Manual.pdf

There’s a list of requirements which need to be met.

And take a look at section “6.1.5.3 Key catalog formatting” in HSE firmware reference manual rev. 2.7. There’s a list of reasons why the formatting may fail.

Regards,

Lukas

[CosminSbera]

Hello @lukaszadrapa .

Thank you for the quick response. 

I've tried to installed the key catalogue with a minimal configuration, but it was not successful. It respond with HSE_SRV_RSP_NOT_ALLOWED.

This is my catalogue configuration.

Any tips on what I could check next?

Thank you in advance!

[lukaszadrapa · Accepted solution]

All groups in RAM catalog must use owner HSE_KEY_OWNER_ANY. You can’t use HSE_KEY_OWNER_CUST here.

All groups in NVM catalog must use owner HSE_KEY_OWNER_CUST or HSE_KEY_OWNER_OEM. But HSE_KEY_TYPE_SHE is an exception – this must be HSE_KEY_OWNER_ANY also in NVM catalog.

Regards,

Lukas

[CosminSbera]

Thank you for the quick replay!

The problem was indeed the content of the key catalogue!

Regards,
Cosmin