CST HAB4 i.MX6 Public Key Store index=5

[benjaminh3]

HI,

the HAB Code-Signing Tool User’s Guide Rev. 2.2 10/2014 states that slots of the i.MX6 public key store range from 0 to 5 with 1=SRK and 2=CSF, hence 2 to 5 are for signing keys.

5.2.6 Install Key
Target Index    2, ..., 5 (HAB4)

Using the Code Signing Tool I cannot use the slot no. 5. CST fails will error

Invalid argument TargetIndex exceed max allowed in command InstallKey

while others are working.

CSF:

[Header]

Version = 4.0

Security Configuration = Open

Hash Algorithm = sha256

Engine Configuration = 0

Certificate Format = X509

Signature Format = CMS

[Install SRK]

File = "./Keys/keys/SRK_1_2_3_4_table.bin"

Source index = 0

[Install CSFK]

File = "./Keys/crts/CSF1_1_sha256_2048_65537_v3_usr_crt.pem"

[Authenticate CSF]

[Install Key]

Verification index = 0

Target index = 5

File = "./Keys/crts/IMG1_1_sha256_2048_65537_v3_usr_crt.pem"

[Authenticate Data]

Verification index = 5

fixed Version entry in csf: neither with 4.1 nor 4.0 it is working.

[utkarsh_gupta · Accepted solution]

Hi,

The issue is found to be in the documentation. Key store index = 5 is not supported. Key store index range from 0 ... 4.

We will be making this change in the documentation and post it on the web with next release of CST.

Thanks,

Utkarsh

[utkarsh_gupta]

Hi,

A CST software bug has been reported and this issue is being worked on. Thank you for bringing this to our notice.

Thanks,

Utkarsh

[Yuri]

   Please try the recent CST tool 2.3.

http://www.freescale.com/webapp/Download?colCode=IMX_CST_TOOL&appType=license&location=null&Parent_n...

Have a great day,
Yuri

-----------------------------------------------------------------------------------------------------------------------
Note: If this post answers your question, please click the Correct Answer button. Thank you!
-----------------------------------------------------------------------------------------------------------------------

[benjaminh3]

Now using cst from cst-2.3.1.tar.gz instead of cst-2.2 using csf above:

Code Signing Tool release version BLN_CST_MAIN_02.03.00

Invalid argument TargetIndex exceed max allowed in command InstallKey