How to create an encrypted rootfs for iMX8MQ using yocto

[ranjitsinh_rathod]

Hi there,

I am using iMX8MQ based custom board and I want to encrypt rootfs. Is there any guide//document for this to implement in yocto to create sdcard image with encrypted rootfs?

I am using 5.4-zeus version.

Many thanks in advance.

Regards,

Ranjitsinh Rathod

[Yuri]

@ranjitsinh_rathod 
Hello,

 Only the following documents are available now.

“i.MX Encrypted Storage Using CAAM Secure Keys” 

https://www.nxp.com/docs/en/application-note/AN12714.pdf

 Section 10.5 (Disk encryption acceleration) in “i.MX_Linux_Users_Guide.pdf”

https://www.nxp.com/docs/en/user-guide/IMX_LINUX_USERS_GUIDE.pdf

Regards,
Yuri.

[ranjitsinh_rathod]

Thanks, Yuri for sharing the details.

I have tried to follow the steps and facing an issue during the step where keys are not able to generate using the caam-keygen utility.

When I'm trying to send the command below which is giving an error.

root@mymachine:~# ./caam-keygen create fromTextkey ecb -t 0123456789abcdef
Unable to open device /dev/caam-keygen

My kernel version is 5.4.3-lts-lf-5.4.y+gf8118585ee3c.

Can you please suggest what could be the issue?

Many Thanks,

Ranjitsinh

[Yuri]

@ranjitsinh_rathod 
Hello,

  perhaps the following helps:

 https://community.nxp.com/t5/i-MX-Processors/CAAM-Black-Blob-Implementation-on-i-MX8/m-p/1196962

Regards,
Yuri.