I am trying to implement secure boot with SPL+U-Boot on SPI-Flash on my mx6ull board but failed.
I've already done the none-SPL version and it work fine, but when I added the SPL support, It failed to boot, console show nothing. Then I use another board (without closed) to boot into u-boot command line and check hab event, it shows as following:
=> hab_status
Secure boot disabled
HAB Configuration: 0xf0, HAB State: 0x66
--------- HAB Event 1 -----------------
event data:
0xdb 0x00 0x14 0x42 0x33 0x22 0x33 0x00
0x00 0x00 0x00 0x0f 0x00 0x90 0x68 0xe8
0x00 0x00 0x90 0x00
STS = HAB_FAILURE (0x33)
RSN = HAB_INV_ADDRESS (0x22)
CTX = HAB_CTX_TARGET (0x33)
ENG = HAB_ENG_ANY (0x00)
--------- HAB Event 2 -----------------
event data:
0xdb 0x00 0x14 0x42 0x33 0x22 0x33 0x00
0x00 0x00 0x00 0x0f 0x00 0x90 0x68 0xe8
0x00 0x00 0x90 0x00
STS = HAB_FAILURE (0x33)
RSN = HAB_INV_ADDRESS (0x22)
CTX = HAB_CTX_TARGET (0x33)
ENG = HAB_ENG_ANY (0x00)
I've attached the SPL(signed and unsigned)/SPL.log/csf(bin and config), please help me to solve this problem. Thanks.
Hi Bobby
nxp does not support spl uboot on i.mx6 platforms, one can look on
[U-Boot] [PATCH 0/5] arm: imx6: Enable Secure Boot (HAB) with SPL Builds
Best regards
igor
-----------------------------------------------------------------------------------------------------------------------
Note: If this post answers your question, please click the Correct Answer button. Thank you!
-----------------------------------------------------------------------------------------------------------------------
Hi igor, thanks for your reply, I've already solved it.
I hate to ask a question from the past, but what was your solution (I'm encountering a very similar issue and the data I can find does not pin down the HAB_INV_ADDRESS issue). Any help would be appreciated!
Hi Bobby,
Would you mind sharing your solution? I am running into the exact same problem you have reported. It looks like that the SPL signature check by HAB works but then the check of u-boot by SPL fails and after that the check of the Linux kernel by u-boot. Is that correct?
Thank you,
Rudi