HAB U-boot issue for imx6ull

[nikunjp26]

Hi team,

I want to try HAB security feature on my imx6ull module with colibri evolution board.

I read the document https://www.nxp.com/docs/en/application-note/AN4581.pdf  for that.

I followed the every step from the Document for creating signed image of u-boot, but I have encountered the error.

I also look the   HAB u-boot cannot boot  and other thread for solution but didn't able to work it.

Toradex community answer :   https://www.toradex.com/community/questions/47335/hab-u-boot-issue-in-colibri-imx6ull.html 

I have attached my all binary and CSF file for that.

Could you help me what is the issue here ??  Why i'm getting that error ??

Can you try at your side and share the result ?  I have attached my keys and u-boot-nand.imx. 

Regards,

Nikunj

[Yuri]

Hello,

  I've sent You directly some comments.

Regards,

Yuri.

[nikunjp26]

Hi ,

I'm able to manage update HAB enable u-boot, But still got the error .

Check below logs. 

Colibri iMX6ULL # dcache off
Colibri iMX6ULL # dcache
Data (writethrough) Cache is OFF
Colibri iMX6ULL # fuse prog 0 7 0x00000002
Programming bank 0 word 0x00000007 to 0x00000002...
Warning: Programming fuses is an irreversible operation!
This may brick your system.
Use this command only if you are sure of what you are doing!

Really perform this fuse programming? <y/N>
y

Colibri iMX6ULL # reset
resetting ...

U-Boot 2016.11-00012-g0ece870-dirty (Jan 31 2020 - 12:05:19 +0530)

Err: serial
Model: Toradex Colibri iMX6ULL 512MB Wi-Fi / Bluetooth IT V1.0A, Serial# 03073136
Net: FEC0
Hit any key to stop autoboot: 0

Colibri iMX6ULL # hab_status

Secure boot disabled

HAB Configuration: 0xf0, HAB State: 0x66

--------- HAB Event 1 -----------------
event data:
0xdb 0x00 0x1c 0x42 0x33 0x18 0xc0 0x00
0xca 0x00 0x14 0x00 0x02 0xc5 0xff 0x00
0x00 0x00 0x16 0x34 0x87 0x7f 0xf4 0x00
0x00 0x08 0x8c 0x00

STS = HAB_FAILURE (0x33)
RSN = HAB_INV_SIGNATURE (0x18)
CTX = HAB_CTX_COMMAND (0xC0)
ENG = HAB_ENG_ANY (0x00)

[nikunjp26]

hi @Yuri.Muhin@nxp.com

I tried you suggestion given in below mail.

Now , the problem is that i'm not bale to get any serial log of u-boot.

No serial logs of U-boot and due to that not able to use any command on U-boot console.

What is the issue here ?? i'm able to use reset method to use flash U-boot but it was without HAB support.

NOT able to use u-boot with HAB enable in it.

Regards,

Nikunj

[Yuri]

Hello,

   Perhaps "ERR010449 System Boot: HAB HAL routine hab_hal_invalidate_cache should invalidate L1/L2 D-cache, but did not in the ROM code" takes place in the case. 

https://www.nxp.com/docs/en/errata/IMX6ULLCE.pdf 

D-cache can be disabled at ROM level by programming BT_MMU_DISABLE fuse (0x470[1]):

=> fuse prog 0 7 0x00000002

The BT_MMU_DISABLE fuse only disables d-cache at BootROM level, U-Boot is re-enabling d-cache by default.

The following command can be used to disable d-cache prior to authenticate Linux Kernel image:

=> dcache off

Have a great day,

Yuri.

-------------------------------------------------------------------------------

Note:

- If this post answers your question, please click the "Mark Correct" button. Thank you!

- We are following threads for 7 weeks after the last post, later replies are ignored

Please open a new thread and refer to the closed one, if you have a related question at a later point in time.

[nikunjp26]

I will try that and post the result to you.

[nikunjp26]

hi teams,

any update?

[nikunjp26]

Hi nxpftftechforum  and nxpblog  team,

any update on this ??