In Secure Boot, hab_auth_img fails to verify zImage

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

In Secure Boot, hab_auth_img fails to verify zImage

410 Views
anoop2
Contributor II

Hello

We are implementing secure boot for iMX7D based board. We are able to build secure U-Boot image and verify the U-Boot firmware signature.

But when we try to verify signed zImage, the command immediately exits with message "hab fuse not enabled". We have programmed the SRK fuse, but fuse for closing the device is not programmed. The message `hab fuse not enabled` indicates that zImage signature is not being verified, because device is not closed. Please confirm whether zImage signature can be verified without closing the device.

In our case, we don't want to close the device till we can be absolutely sure that both u-boot and zImage signatures can be successfully verified by HAB module. So we definitely need a way to verify zImage signature, without closing the device.

Thanks

0 Kudos
1 Reply

401 Views
Yuri
NXP Employee
NXP Employee

@anoop2 
Hello,

   I think the message "hab fuse not enabled" is just a warning. Please analyze 
all printed information about the error.

Regards,
Yuri.

0 Kudos