How to fuse prog revoke SRK from uboot or user space

[starlabsstas]

Hi,

I successfully set up secure boot with the imx8mm similar to this post: https://community.nxp.com/t5/i-MX-Processors-Knowledge-Base/Steps-to-enable-secure-boot-in-i-MX8M-Na...

Secure boot works. Now I want to revoke a single SRK key permanently within the SoC. From the imx7 I know that I need to write a bitmask to some memory mapped area. This info was retrieved from the security documentation back then.

Now for the imx8mm I do not have access to the security documentation yet.

Can someone tell me how to revoke an SRK for the imx8mm within u-boot or linux user space?

I have an NDA if this helps in speeding this up.

[Harvey021]

Hi @starlabsstas 

The way of revoking SRK for i.MX8MM is similar to imx7.  Like fuse prog 9 3 bits[0:3].

More details can be found at B SRK revocation on HABv4 of  i.MX Secure Boot on HABv4 Supported Devices (nxp.com)

Best regards

Harvey