Is it possible to load uboot signed by IMG1/CSF1 certs and kernel by IMG3/CSF3 certs

[murugan_sathish]

I used the CST tool to sign the u-boot and kernel image. 

In u-boot, Source index is 0, and for csfk and key,  I used img1 and csf1 certs

And for the kernel, source index is 2 and for csfk and key, I take img3 and csf3 certs

However, the u-boot is unable to load the kernel. it seems like hab verification failed. 

Is it possible to load u-boot signed by one certs and kernel signed by one certs ?

[radhikasomaiya]

Hi @murugan.sathishram@in.bosch.com ,

Can you please verify that your target index and verification index both are same or not? As from section 3.5. Create the CSF description file of Secure boot User's guide.A verification index in an Authenticate Data command must appear as the target index in a previous Install Key command.

And it seems like this query is also the same, if so, can you please try after changing your verification index from 0 to 2?

   # Key slot index used to authenticate the key to be installed
   Verification index = 0  

Regards,

Radhika Somaiya.