I was able to succeeded with signed boot on u-boot with u-boot.imx.
=> hab_status
Secure boot disabled
HAB Configuration: 0xf0, HAB State: 0x66
<< series of HAB events >>
After that I close the device
=> fuse prog 0 6 0x2
But board is not able to boot with signed image or normal image, any help?
Hi,
Issue is that, somehow I lost the CST key so I'm unable to make proper signed image. Is there any possibility to boot the board like with JTAG or any other way.
And also once the device is closed (secure), we can't revert to un-secure is it?
thanks!
Jagan.
Hi,
This is the full hab_status
=> hab_status
Secure boot disabled
HAB Configuration: 0xf0, HAB State: 0x66
--------- HAB Event 1 -----------------
event data:
0xdb 0x00 0x08 0x41 0x33 0x11 0xcf 0x00
STS = HAB_FAILURE (0x33)
RSN = HAB_INV_CSF (0x11)
CTX = HAB_CTX_CSF (0xCF)
ENG = HAB_ENG_ANY (0x00)
--------- HAB Event 2 -----------------
event data:
0xdb 0x00 0x14 0x41 0x33 0x0c 0xa0 0x00
0x00 0x00 0x00 0x00 0x00 0x90 0x74 0x00
0x00 0x00 0x00 0x20
STS = HAB_FAILURE (0x33)
RSN = HAB_INV_ASSERTION (0x0C)
CTX = HAB_CTX_ASSERT (0xA0)
ENG = HAB_ENG_ANY (0x00)
--------- HAB Event 3 -----------------
event data:
0xdb 0x00 0x14 0x41 0x33 0x0c 0xa0 0x00
0x00 0x00 0x00 0x00 0x00 0x90 0x74 0x20
0x00 0x00 0x00 0x01
STS = HAB_FAILURE (0x33)
RSN = HAB_INV_ASSERTION (0x0C)
CTX = HAB_CTX_ASSERT (0xA0)
ENG = HAB_ENG_ANY (0x00)
--------- HAB Event 4 -----------------
event data:
0xdb 0x00 0x14 0x41 0x33 0x0c 0xa0 0x00
0x00 0x00 0x00 0x00 0x00 0x90 0x80 0x00
0x00 0x00 0x00 0x04
STS = HAB_FAILURE (0x33)
RSN = HAB_INV_ASSERTION (0x0C)
CTX = HAB_CTX_ASSERT (0xA0)
ENG = HAB_ENG_ANY (0x00)
Hi Jagan,
I think you didn't understand the HAB Events, you can think of the events as ERRORS.
So having HAB events, you shouldn't have closed the device.
Now the only option is to properly sign a binary to load using the serial download protocol (imx_usb_loader) or to use a JTAG.
Regards,
Gary