Capsule update failed on imx93

[arka]

Hi ,

I am trying to test capsule update on imx93-evk  , we got a error below , help us to fix the issue?

note:-
Flashed the imx-boot-imx93evk-sd.bin-flash_singleboot_stmm_capsule image into emmc and ,
Flashed acs.img to the SD card and plug in the SD card to the board.

boot the image in EMMC mode

EMMC -> mmc 0

SD-CARD -> mmc 1

Steps to test capsule update:-

=>mw 0x80000000 0xc33eebd3;mw 0x80000004 0x9f4c336e;mw 0x80000008
0xc0e28c98;mw 0x8000000c 0x615459b8;mw 0x80000010 0x86cf2b0d;mw 0x80000014
0xf24d8464;mw 0x80000018 0xc6e656ab;mw 0x8000001c 0xe401b71b
=>mw.b 0x90000000 0 0x400000
=>mmc rpmb write 0x90000000 0 0x2000 0x80000000

=>env set dfu_alt_info "mmc 0=1 raw 0x0 0x2000 mmcpart 1"
=> saveenv
=> reset

=>fatload mmc 1:1 0x80480000 /security-interface-extension-keys/TestPK1.auth
=>setenv -e -nv -bs -rt -at -i 0x80480000:$filesize PK
=>fatload mmc 1:1 0x80480000 /security-interface-extension-keys/TestKEK1.auth
=>setenv -e -nv -bs -rt -at -i 0x80480000:$filesize KEK
=>fatload mmc 1:1 0x80480000 /security-interface-extension-keys/TestDB1.auth
=>setenv -e -nv -bs -rt -at -i 0x80480000:$filesize db
=>fatload mmc 1:1 0x80480000 /security-interface-extension-keys/TestDBX1.auth
=>setenv -e -nv -bs -rt -at -i 0x80480000:$filesize dbx

Power of the board and :-

Then we have  another sdcard with EFI partition using the EFI partition is created using fdisk command then connect the sdcard into target board imx93-evk. with EFI/UpdateCapsule directory is created.

 -> setenv serverip 192.168.1.128;dhcp $loadaddr capsule1.bin

-> fatwrite mmc 1:1 ${loadaddr} /EFI/UpdateCapsule/capsule1.bin 0x${filesize}

-> efidebug boot add -b 0 Boot0000 mmc 1:1 /EFI/UpdateCapsule/capsule1.bin;efidebug boot next 0

-> setenv -e -nv -bs -rt -v OsIndications =0x0000000000000004

-> efidebug capsule disk-update

error:-
u-boot=> efidebug capsule disk-update
Capsule authentication check failed. Aborting update
Firmware update failed: <NULL>
Applying capsule capsule1.bin failed.
Reboot after firmware update.

[JosephAtNXP]

Hi,

Thank you for your interest in NXP Semiconductor products,

A customer got a list from missing steps from the guide, could you confirm that they are done otherwise, perform them? Keep in mind is for SD card boot, you might want to adjust it.

Here is the complete list of instructions for how to do the update from sdcard boot:

1. Write 8MMini SystemReady-IR certified bootloader to SDCard

2. Mark mmcblk1p1 partion as EFI (with fdisk tool)

3. Create /EFI/UpdateCapsule/ path on the efi partition and copy capsule1.bin there

4. Boot 8MMini and stop in bootloader:

u-boot=> env set dfu_alt_info "mmc 1=1 raw 0x42 0x2000"
u-boot=> efidebug boot add 0 Boot0000 mmc 1:1 capsule1.bin;efidebug boot next 0
u-boot=> setenv -e -nv -bs -rt -v OsIndications =0x04
u-boot=> efidebug capsule disk-update /*at this point the bootloader is update*/
u-boot=> savee

5. Reset /* board will boot with new bootloader */

Regards

[arka]

Hi @JosephAtNXP ,

We have followed steps to update the bootloader via capsule update, we got an issue with capsule authentication during the process , below i have added the steps and screenshot for your reference.

1.Here are the steps I've followed:

Enabled STMM in Yocto:

In the

local.conf

file, I added the following line:

MACHINE_FEATURES:append = " stmm"

2.Followed the U-Boot steps:

u-boot=> env set dfu_alt_info "mmc 1=1 raw 0x42 0x2000"

u-boot=> efidebug boot add 0 Boot0000 mmc 1:1 capsule1.bin; efidebug boot next 0

u-boot=> setenv -e -nv -bs -rt -v OsIndications = 0x04

u-boot=> efidebug capsule disk-update /* At this point, the bootloader is updated */

u-boot=> savee

3.However, after running these commands, I encountered the following error:


u-boot=> env set dfu_alt_info "mmc 1=1 raw 0x42 0x2000"
u-boot=> efidebug boot add -b 0 Boot0000 mmc 1:1 capsule1.bin;efidebug boot next 0
adv7535_mipi2hdmi hdmi@3d: Can't find cec device id=0x3c
fail to probe panel device hdmi@3d
fail to get display timings
u-boot=> setenv -e -nv -bs -rt -v OsIndications =0x04
GUID: 8be4df61-93ca-11d2-aa0d-00e098032b8c (EFI_GLOBAL_VARIABLE_GUID)
Attributes: 0x7
Value:
00000000: 04 .
u-boot=> efidebug capsule disk-update
Capsule authentication check failed. Aborting update
Firmware update failed: <NULL>
Applying capsule capsule1.bin failed.
Reboot after firmware update.

4.Created an EFI partition using the appropriate image:-

[arka]

Hi @JosephAtNXP ,

Thank you for your response.

I have a few clarifications regarding the i.MX93:

1. Could you please elaborate on the missing steps from the user guide? We're not aware of any omissions.

2. You mentioned a "SystemReady-IR certified bootloader"—where can we find it, or how can we build it for the i.MX93?

3. The steps you provided are for the i.MX 8M Mini. Do these steps also apply to the i.MX93, or are there any parameter differences we should be aware of?

Thanks again.

[arka]

Hi @JosephAtNXP ,

Can you share steps on how to create EFI partion and flash the uboot on sdcard?

Write 8MMini SystemReady-IR certified bootloader to SDCard

Mark mmcblk1p1 partion as EFI (with fdisk tool)