HAB authentication Faild

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

HAB authentication Faild

1,906 Views
adrian_dusinski
Contributor II

I upload signed uboot image to device, program SRK and closed the device with trustfence.

After boot I get error:

Loading file 'boot.scr' to addr 0x8000000...

Done

   Autenticating image from DDR location 0x808000000... FAILED!

Secure boot enabled

HAB Configuration: 0xcc, HAB State:0x99

I upload my zimage to ram and check hab_auth_img 80a000000 0x0400 and again get Autenticating image from DDR

location 0x808000000... FAILED!

HAB Event 1

event data:

   0xdv 0x00 0x08 0x42 0x33 0x29 0xe1 0x00

HAB Event 1

event data:

   0xdb 0x00 0x2c 0x42 0x33 0x30 0xe1 0x1e

   0x00 0x00 0x00 0x00 0x80 0x00 0xb3 0x00

   0x80 0x00 0x20 0x01 0x00 0x00 0x00 0x20

   0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00

   0x00 0x00 0x00 0x08 0x00 0x00 0x00 0x00

   0x00 0x00 0x00 0x00

Where I can find information about this event? In Secure Boot on i.MX 50, i.MX 53, i.MX 6 and i.MX 7 Series using HABv4?

It's mean that SRK public key saved in device and private key in image do not match?

Regards,

Adrian

Update:

Ok, I try boot secure images with "open device" without secure boot enabled.

After loading boot.src to ram i get Bad data crc.

I try the same images without trustfence and it's works.

Why it happens?

Labels (3)
4 Replies

1,710 Views
Yuri
NXP Employee
NXP Employee

adrian.dusinski@evatronix.com 

Hello,

  What U-boot  and Linux release are used here?

Regards,

Yuri.

0 Kudos
Reply

1,710 Views
adrian_dusinski
Contributor II

Linux version 4.14

uboot v2017.03

yocto 2.6

Regards,

Adrian

Update:

When I try skip boot.scr I get response:

##  Flattened Device Tree blob at 8300000

      Booting using the fdt blob at 0x8300000

      Using Device Tree in place at 8300000, end 8300b55a

fdt_find_or_add_subnode: chosen: FDT_ERR_BADSTRUCTURE

ERROR: /chosen node create failed

- must RESET the board....

0 Kudos
Reply

1,710 Views
Yuri
NXP Employee
NXP Employee

adrian.dusinski@evatronix.com 

Hello,

 I 've sent You example. Hope it helps.

Regards,

Yuri.

1,710 Views
adrian_dusinski
Contributor II

Very thank you for examples.

I'll read this and let you know if it's working.

Regards,

Adrian

0 Kudos
Reply