In Secure Boot, hab_auth_img fails to verify zImage

取消
显示结果 
显示  仅  | 搜索替代 
您的意思是: 

In Secure Boot, hab_auth_img fails to verify zImage

582 次查看
anoop2
Contributor II

Hello

We are implementing secure boot for iMX7D based board. We are able to build secure U-Boot image and verify the U-Boot firmware signature.

But when we try to verify signed zImage, the command immediately exits with message "hab fuse not enabled". We have programmed the SRK fuse, but fuse for closing the device is not programmed. The message `hab fuse not enabled` indicates that zImage signature is not being verified, because device is not closed. Please confirm whether zImage signature can be verified without closing the device.

In our case, we don't want to close the device till we can be absolutely sure that both u-boot and zImage signatures can be successfully verified by HAB module. So we definitely need a way to verify zImage signature, without closing the device.

Thanks

0 项奖励
回复
1 回复

573 次查看
Yuri
NXP Employee
NXP Employee

@anoop2 
Hello,

   I think the message "hab fuse not enabled" is just a warning. Please analyze 
all printed information about the error.

Regards,
Yuri.

0 项奖励
回复