In Secure Boot, hab_auth_img fails to verify zImage

キャンセル
次の結果を表示 
表示  限定  | 次の代わりに検索 
もしかして: 

In Secure Boot, hab_auth_img fails to verify zImage

446件の閲覧回数
anoop2
Contributor II

Hello

We are implementing secure boot for iMX7D based board. We are able to build secure U-Boot image and verify the U-Boot firmware signature.

But when we try to verify signed zImage, the command immediately exits with message "hab fuse not enabled". We have programmed the SRK fuse, but fuse for closing the device is not programmed. The message `hab fuse not enabled` indicates that zImage signature is not being verified, because device is not closed. Please confirm whether zImage signature can be verified without closing the device.

In our case, we don't want to close the device till we can be absolutely sure that both u-boot and zImage signatures can be successfully verified by HAB module. So we definitely need a way to verify zImage signature, without closing the device.

Thanks

0 件の賞賛
返信
1 返信

437件の閲覧回数
Yuri
NXP Employee
NXP Employee

@anoop2 
Hello,

   I think the message "hab fuse not enabled" is just a warning. Please analyze 
all printed information about the error.

Regards,
Yuri.

0 件の賞賛
返信