Automatically switching eMMC boot partition with i.MX8MM

[Sampo]

We use eMMC memory with our i.MX8MM. The memory has two boot partitions, each containing a copy of the bootloader. Secure boot is used.

Is there any way to automatically recover from the case that the selected boot partition contains an invalid bootloader? For example signed with a revoked key or corrupted somehow.

If I update an unsigned bootloader to the active partition, the device will go into serial download mode after rebooting.

Is there any way to configure the processor or Boot ROM to automatically try the other partition, if the active one fails to start?

[AldoG · Accepted solution]

Hello,

Yes, please refer to the Reference Manual chapter 6.1.5.4.5 Redundant boot support for expansion device.
 
For the secondary image support, the primary image must reserve the space for the secondary image table.

Also, for the Closed mode, if there are failures during primary image authentication, the boot ROM turns on the PERSIST_SECONDARY_BOOT bit (see Table 6-8) and performs the software reset. (After the software reset, the secondary image is used).

Best regards/Saludos,
Aldo.