I met a problem on iMX6sl HAB

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

I met a problem on iMX6sl HAB

741 Views
sunsonk
Contributor I

Hii...

         I'm trying to boot a i.MX6 with a signed u-boot and I'm getting HAB event.

      I followed all the guidelines provided in the sections 6.1 and 6.2 in AN4581.pdf for signing the u-boot.bin for MFG tool.But i have met a problem in that i'm having a one hab event while loading images through MFG_Tool.The event is as follows,

                    “0xdb 0x00 0x08 0x41 0x33 0x05 0x0a 0x00”.

       This event tells us the HAB_INV_IVT i.e., invalid ivt.I used the working u-boot.bin which is successfully loaded in to the device and booting properly in closed mode configuration also.I'm building the same u-boot source code with mfg config,and copied to the u-boot_mfg folder and run the scripts to generate u-boot_signed.bin.

    My csf_file is,

---------------------------------------------------

[Header]

    Version = 4.0

    Security Configuration = Open

    Hash Algorithm = sha256

    Engine Configuration = 0

    Certificate Format = X509

    Signature Format = CMS

[Install SRK]

    File = "../crts/SRK_1_2_3_4_table.bin"

    Source index = 0

[Install CSFK]

    File = "../crts/CSF1_1_sha256_2048_65537_v3_usr_crt.pem"

[Authenticate CSF]

[Install Key]

    Verification index = 0

    Target index = 2

    File = "../crts/IMG1_1_sha256_2048_65537_v3_usr_crt.pem"

# Sign padded u-boot starting at the IVT through to the end with

# length = 0x26C00

# This covers the essential parts: IVT, boot data and DCD.

# Blocks have the following definition:

#    Image block start address on i.MX, Offset from start of image file,

#    Length of block in bytes, image data file

[Authenticate Data]

    Verification index = 2

    Blocks = 0x87800400 0x400 0x26C00 "u-boot-mx6sl-evk_padded.bin",\

              0x00910000 0x42c 0x248 "u-boot-mx6sl-evk_padded.bin"

Is there any thing I need to modify,please suggest me to solve this problem.

u-boot_signed.bin - IVT to DCD ptr binary:

0000400 00d1 4020 0680 8780 0000 0000 042c 8780

0000410 0420 8780 0400 8780 7000 8782 0000 0000

0000420 0000 8780 9400 0002 0000 0000 02d2 4048

Labels (1)
0 Kudos
2 Replies

495 Views
ashleysheng
Contributor III

Hi Sunson,

I'm working on HAB function and using mfgtool to download the signed image into a close device recently.  I'm stuck in the same problem as your post.  Did you get the problem fixed? If so, can you share your experience on how to fix the problem? Thanks.

0 Kudos

495 Views
Yuri
NXP Employee
NXP Employee

Hello,

   Please refer to section 6 (Download and execute signed image with mfgtool)

of the following thread

Mx6 HAB (High Assurance Boot)


Have a great day,
Yuri

-----------------------------------------------------------------------------------------------------------------------
Note: If this post answers your question, please click the Correct Answer button. Thank you!
-----------------------------------------------------------------------------------------------------------------------

0 Kudos