Does any one try the secure boot with SPL+U-Boot on SPI-Flash on mx6ull board?

[bobbychen197805]

I am trying to implement secure boot with SPL+U-Boot on SPI-Flash on my mx6ull board but failed.

I've already done the none-SPL version and it work fine, but when I added the SPL support, It failed to boot, console show nothing. Then I use another board (without closed) to boot into u-boot command line and check hab event, it shows as following:

=> hab_status

Secure boot disabled

HAB Configuration: 0xf0, HAB State: 0x66

--------- HAB Event 1 -----------------
event data:
0xdb 0x00 0x14 0x42 0x33 0x22 0x33 0x00
0x00 0x00 0x00 0x0f 0x00 0x90 0x68 0xe8
0x00 0x00 0x90 0x00

STS = HAB_FAILURE (0x33)
RSN = HAB_INV_ADDRESS (0x22)
CTX = HAB_CTX_TARGET (0x33)
ENG = HAB_ENG_ANY (0x00)

--------- HAB Event 2 -----------------
event data:
0xdb 0x00 0x14 0x42 0x33 0x22 0x33 0x00
0x00 0x00 0x00 0x0f 0x00 0x90 0x68 0xe8
0x00 0x00 0x90 0x00

STS = HAB_FAILURE (0x33)
RSN = HAB_INV_ADDRESS (0x22)
CTX = HAB_CTX_TARGET (0x33)
ENG = HAB_ENG_ANY (0x00)

I've attached the SPL(signed and unsigned)/SPL.log/csf(bin and config), please help me to solve this problem. Thanks.

[igorpadykov]

Hi Bobby

nxp does not support spl uboot on i.mx6 platforms, one can look on

[U-Boot] [PATCH 0/5] arm: imx6: Enable Secure Boot (HAB) with SPL Builds 

Best regards
igor
-----------------------------------------------------------------------------------------------------------------------
Note: If this post answers your question, please click the Correct Answer button. Thank you!
-----------------------------------------------------------------------------------------------------------------------

[bobbychen197805]

Hi igor, thanks for your reply, I've already solved it. 

[james_mccusker]

I hate to ask a question from the past, but what was your solution (I'm encountering a very similar issue and the data I can find does not pin down the HAB_INV_ADDRESS issue). Any help would be appreciated!

[rudolf_streif]

Hi Bobby,

Would you mind sharing your solution? I am running into the exact same problem you have reported. It looks like that the SPL signature check by HAB works but then the check of u-boot by SPL fails and after that the check of the Linux kernel by u-boot. Is that correct?

Thank you,

Rudi