Hello
We are implementing secure boot for iMX7D based board. We are able to build secure U-Boot image and verify the U-Boot firmware signature.
But when we try to verify signed zImage, the command immediately exits with message "hab fuse not enabled". We have programmed the SRK fuse, but fuse for closing the device is not programmed. The message `hab fuse not enabled` indicates that zImage signature is not being verified, because device is not closed. Please confirm whether zImage signature can be verified without closing the device.
In our case, we don't want to close the device till we can be absolutely sure that both u-boot and zImage signatures can be successfully verified by HAB module. So we definitely need a way to verify zImage signature, without closing the device.
Thanks