App note AN12714 not working with Apalis iMX8QM

[nxpuser_rb]

I'm trying to test an Apalis iMX8QM module on an IXORA carrier board by using the procedures described in the app note AN12714 "i.MX Encrypted Storage Using CAAM Secure Keys", rev 0.  Both products are supplied by Toradex.

The step that downloads the source code from NXP always fails, "repo init -u https://source.codeaurora.org/external/imx/imx-manifest -b imx-linux-sumo -m imx-4.14.78-1.0.0_ga.xml".  It seems like the link to the source code is no longer avalable: the error mesage is "Could not resolve host: source.codeaurora.org"

I also installed and built a yocto distro for the Apalis iMX8 from Toradex for a minimal console based embedded linux.  It was based on development version "6.2.0", tdx-wayland, "reference minimal image", linux kernel "5.15.77".  I modified the build so that it included the utilities "keyctl" and "dmsetup".  It built successfully, but when I ran "dmsetup targets" on the board, it did not list crypt, but it did list the cryptographic transformations listed in the previous step.

After receiving some help from Toradex, I added a layer to the build containing a defconfig file that had the linux kernel flags listed at the end of the app note in appendix A, 5.1.  I rebuilt the distro but "dmsetup targets" still did not list crypt.

Can you give some help with this issue?

Thanks,

Rick Bauer
Seattle, WA

[Bio_TICFSL]

Hello,

You must change the codeaurora since its not supported anymore it change for github

https://www.nxp.jp/design/software/embedded-software/nxp-github:NXP-GITHUB

Regards

[nxpuser_rb]

The link you indicated still doesn't work. I would like to get the source code for the caam-keygen application. Can you give me a link from which I could download the source code?
I have a build of Toradex embedded linux for the Apalis iMX8 that includes the tools keyctl and dmsetup and the modules required for dmcrypt. I can load those modules manually. I also can successfully execute the steps in the I.MX Linux User's Guide for section 10.5.3.1 for DM-Crypt with a trusted plain key. I would like to do the same thing for DM-Crypt with CAAM's tagged key, but caam-keygen is required for that. I could test that facility if I had the source code. I could compile it and run it using the steps in the procedure, or if you could give me a set of commands that I could execute from the bash shell similar to the steps for the plain key, I could test it manually.
Regards,
Rick Bauer