Enabling high assurance boot (secure boot) on i.mx6 for uboot and kernel using Yocto

[DavisRoman]

I'm currently working on enabling high assurance boot on i.mx6 for uboot and kernel and I'm looking for a starting point.

What yocto recipes, layers and/or bbclasses are available that will help automate the secure boot signing process for i.mx6?

There are lots of shell scripts floating around however the process is mostly the same for everyone so I'm not sure why most of this isn't upstreamed into some common yocto bbclasses.

Before I go ahead and write yet another script I would like to know if there is any yocto specific recipes, layers and/or bbclasses I can use so that I don't try to reinvent the wheel?

Thank you,

Davis

[Yuri]

Hello,

  The HAB is not supported directly under Yocto, since it requires the CST using;

this process is not simple for automation, some manual operations are needed,

knowing internal U-boot and kernel images addresses.

Have a great day,

Yuri

------------------------------------------------------------------------------

Note: If this post answers your question, please click the Correct Answer

button. Thank you!