Hi all,
We cannot boot HAB encrypted image in a open i.MX 6SX SABRE-SD EVK. HAB encryption is successful and it fails to boot. We confirmed that U-Boot is valid by loading the HAB encrypted binary in a closed EV.
Later we've found on AN12056 that it's required to have the processor in secure state (SEC_CONFIG fused) or OP-TEE. Hence we've added OP-TEE to the U-Boot and the encrypted image boots correctly.
Our question is that, How OP-TEE influences CAAM since OP-TEE is started after U-Boot in the boot flow?
