Enabling kernel verification on IMX8MP

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Enabling kernel verification on IMX8MP

330 Views
kartheek
Contributor III

Hi,

I am working kernel authentication and booting through u-boot.  The below is u-boot cmd used to authenticate kernel. I have tried with signed kernel with correct and different keys. But i am getting only "Kernel authentication passed!". 

Is there any other way to get the verify the kernel image.

u-boot=>setenv auth_kernel 'if fatload mmc 1:1 ${loadaddr} Image &&                                                                                                 hab_auth_img   ${loadaddr} ${filesize} 0x1a90000; then \
                                                         echo "Kernel authentication passed!"; \
                                                     else \
                                                         echo "Kernel authentication failed!"; \
                                                     fi'
Thanks,
Kartheek

0 Kudos
Reply
1 Reply

253 Views
Harvey021
NXP TechSupport
NXP TechSupport

Hi,

There will be error log printed if there are events. There is offline tool provided in CST - hab_image_verifier.

 

Regards

Harvey

 

0 Kudos
Reply
%3CLINGO-SUB%20id%3D%22lingo-sub-2200927%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3EEnabling%20kernel%20verification%20on%20IMX8MP%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2200927%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3EI%20am%20working%20kernel%20authentication%20and%20booting%20through%20u-boot.%26nbsp%3B%20The%20below%20is%20u-boot%20cmd%20used%20to%20authenticate%20kernel.%20I%20have%20tried%20with%20signed%20kernel%20with%20correct%20and%20different%20keys.%20But%20i%20am%20getting%20only%20%22Kernel%20authentication%20passed!%22.%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20there%20any%20other%20way%20to%20get%20the%20verify%20the%20kernel%20image.%3C%2FP%3E%3CP%3Eu-boot%3D%26gt%3Bsetenv%20auth_kernel%20'if%20fatload%20mmc%201%3A1%20%24%7Bloadaddr%7D%20Image%20%26amp%3B%26amp%3B%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3Bhab_auth_img%26nbsp%3B%20%26nbsp%3B%24%7Bloadaddr%7D%20%24%7Bfilesize%7D%200x1a90000%3B%20then%20%5C%3CBR%20%2F%3E%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3Becho%20%22Kernel%20authentication%20passed!%22%3B%20%5C%3CBR%20%2F%3E%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3Belse%20%5C%3CBR%20%2F%3E%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3Becho%20%22Kernel%20authentication%20failed!%22%3B%20%5C%3CBR%20%2F%3E%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3Bfi'%3CBR%20%2F%3EThanks%2C%3CBR%20%2F%3EKartheek%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2203313%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%20translate%3D%22no%22%3ERe%3A%20Enabling%20kernel%20verification%20on%20IMX8MP%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2203313%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3E%3CP%3EHi%2C%3C%2FP%3E%0A%3CP%3EThere%20will%20be%20error%20log%20printed%20if%20there%20are%20events.%26nbsp%3B%3CSPAN%20data-teams%3D%22true%22%3EThere%20is%20offline%20tool%20provided%20in%20CST%20-%20hab_image_verifier.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CBR%20%2F%3E%0A%3CP%3E%3CSPAN%20data-teams%3D%22true%22%3ERegards%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20data-teams%3D%22true%22%3EHarvey%3C%2FSPAN%3E%3C%2FP%3E%0A%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E