Can't boot after migrating to Android 12.1.0 from Android 9 with RPMB key programmed board

[tristanbss]

Hi,

We are trying to migrate to Android 12.1.0_1.0.0 from Android 9.

After flash images of android 12 to a board has been programmed RPMB key with Android 9 image that was built with "export CFG_RPMB_WRITE_KEY=y".

It failed to boot with the error logs as below:

U-Boot SPL 2022.04-gf3f79c8a (Jun 18 2024 - 20:53:43 +0800)
PMIC: PFUZE100 ID=0x10
DDRINFO: start DRAM init
DDRINFO: DRAM rate 3200MTS
DDRINFO:ddrphy calibration done
DDRINFO: ddrmix config done
SEC0: RNG instantiated
Normal Boot
Trying to boot from MMC1
No bootable slots found, try to boot into recovery mode...
MAC error on block #0
rpmb_init: read RPMB error
RPMB init failed!
SPL: failed to boot from all boot devices
### ERROR ### Please RESET the board ###

 Seems like it can't access RPMB on Android 12 bootloader.

How can i fix this issue?

[AldoG]

Hello,

Could you share how you did the migration?
Did you perform an OTA or just overwritte the whole image with A12?
Also, which i.MX device are you using?

Best regards/Saludos,
Aldo.

[tristanbss]

Hi AldoG,

We use a imx8mq custom board.

All images and partitions were rewritten to Android 12 images by uuu.

Thank you,

Tristan

[AldoG]

Hello,

Could you get the detail command which you have used to upgrade the system?

For example: uuu_imx_android_flash.bat -f imx8qm -a -e -u trusty-dual 

Best regards/Saludos,
Aldo.

[tristanbss]

Hi,

Here is the command we used,

./uuu_imx_android_flash.sh -t emmc -f imx8mq -p myproduct -c 58 -e -u trusty-dual

Best regards,

Tristan

[tristanbss]

BTW, we made a SD card with images enabled CFG_RPMB_WRITE_KEY to write RPMB key.

[AldoG]

Hello,

Thank you for sharing, I'm still working on this, could you share if the device is closed?

Best regards/Saludos,
Aldo.

[tristanbss]

Hi,

Thank you for your assistance.

If you mean HAB close, it is not closed yet.

Best regards,

Tristan

[AldoG]

Hello,

Please note that for RPBM key, it must be set after ahab_close.

Best regards/Saludos,
Aldo.

[tristanbss]

Hi,

Thank you for your response.

If we close the HAB of the board has programmed RPMB key, can it fix the boot issue?

Or any way to let this board can boot normally?

But if we close the HAB before programming RPMB key with Android 9, it will boot normally when flash to Android 12?

Best regards,

Tristan

[AldoG]

Hello,

Yes, usually before setting the RPMB key, SRK hash value needs to be programmed into eFuse hardware and close the chips.

Also, note that it is necessary to know where the RPMB key blob encapsulated with CAAM is stored and how tochange the location.

Best regards/Saludos,
Aldo.