S32K3_HSE_ASB_postboot_passflag

[wuxianlong]

Hi, NXP

I am now ready to use HSE's ASB to verify my BOOT and APP. I use Preboot SMR to verify my BOOT and release the M7 kernel when the verification passes. Then I used postboot to verify my APP in parallel. The problem now is how to confirm that my APP verification was successful. (I can't find the status sign of postboot pass)

The current idea is to wait for the HSE initialization to complete before jumping to the APP, and then confirm whether the verification is successful by checking whether the SMR KEYs are valid. Can this method be implemented? is there a better way?


Best Regards,
xianlong

[lukaszadrapa · Accepted solution]

Hi

Yes, the end of post boot phase can be monitored by HSE_STATUS_INIT_OK:

You can read the status directly. See struct hseAttrSmrCoreStatus_t in HSE Service API reference manual:

You can find an example for Get Attribute service in HSE DemoExamples:
https://www.nxp.com/webapp/Download?colCode=S32K3_HSE_DemoExamples

This is from c:\NXP\S32K3_HSE_DemoExamples_1_0_0\S32K3_HSE_DemoExamples\Secure_Boot\S32K344_Advanced_SecureBoot:

/* Get status of the Secure Memory Region and Core Reset Entry installation */
HseResponse = Get_Attr(
HSE_SMR_CORE_BOOT_STATUS_ATTR_ID,
sizeof(hseAttrSmrCoreStatus_t),
(void *)(&smrCoreStatus));
ASSERT(HSE_SRV_RSP_OK == HseResponse);

Regards,
Lukas

[wuxianlong]

Thank you very much for your help. I ignored the API documentation before and did not find the information.