Enable HAB ON imx6 to secure barebox boatloder

[haGkiu]

Hello,

I am working on enabling secure boot or HAB on IMX6 version silicium 1.6 with barebox as a boatloder.

precisely i want to sign barebox with CST tool and enable HAB so it authenticates it

I have some questions regarding the process :

- If i close the device to avtivate the HAB is it possible to reopen it( to desactivate HAB) ?

- I can't find any documentation about the CSF file to sign barebox , i can only find documentation about u-boot, can anyone provide me with information about how to write the .csf file for barebox.

- I can't find documentation about the steps to avtivate secure boot on IMX6 with barebox as a boatloder, most of the documentations i found were on u-boot.

 If anyone encountered the same issues or worked on the secure boot for IMX6 barbebox, any help is appreciated.

Thanks is advance.

[a_fatoum]

Calling cst and generation of the CSF are integrated into the barebox build system. Checkout the project's documentation on how to use: https://www.barebox.org/doc/latest/boards/imx.html#high-assurance-boot

[haGkiu]

Hello,I already checked barebox'documentation and source code, i found imx-image library which is responsible for signing but i did'nt find any documentation or readme on how to use it to sign the barebox.

[Bio_TICFSL]

Hello,

- If i close the device to avtivate the HAB is it possibe to reopen it( to desactivate HAB) ?

A. Sorry no

- I can't find any documentation about the CSF file to sign barebox , i can only find documentation about u-boot, can anyone provide me with information about how to write the .csf file for barebox.

A. NXP don't have a documentation about CSF

- I can't find documentation about the steps to avtivate secure boot on IMX6 with barebox as a boatloder, most of the documentations i found were on u-boot.

A. You can find all the information about linux BSP on:

https://www.nxp.com/design/software/embedded-software/i-mx-software/embedded-linux-for-i-mx-applicat...

Regards