Make the secure u-boot image for NAND with i.MX6 SoloX

[samuel-park]

Hello all,

Customer is trying to make secure u-boot image for NAND with i.MX6 SoloX.

in file include/configs/mx6sx_arm2.h, add

+#define CONFIG_SECURE_BOOT

rebuild u-boot.

make mx6x_17x17_arm2_nand_defconfig

make -j4

The generated u-boot.imx is not booted on customer board.

So I changed the CONFIG_CSF_SIZE from 0x4000 to 0x400.

The generated u-boot image is booted.

The booted image and not booted image is in difference at image size field in below Boot Data area.

The difference is 0x3C00(0x4000 - 0x400).

The secure u-boot image for QSPI and SD is booted on i.mx6solox sabresd board.

Could you please let me know if you have any comments?

Thanks in advance.

[bba]

Hello, had same problems on iMX6ul with NAND flash. The generated u-boot.imx does not boot on customer board with #define CONFIG_CSF_SIZE 0x4000. We also had to reduce the CONFIG_CSF_SIZE down to 0x400. Do you have any comments, why this is necessary?

Regards,

Birger

[bba]

On our board the hab_status failed with a CONFIG_CSF_SIZE of 0x400

=> hab_status

Secure boot disabled

HAB Configuration: 0xf0, HAB State: 0x66

--------- HAB Event 1 -----------------

event data:

0xdb 0x00 0x14 0x42 0x33 0x18 0xc0 0x00

0xca 0x00 0x0c 0x00 0x01 0xc5 0x00 0x00

0x00 0x00 0x07 0xb0

--------- HAB Event 2 -----------------

event data:

0xdb 0x00 0x14 0x42 0x33 0x0c 0xa0 0x00

0x00 0x00 0x00 0x00 0x87 0x7f 0xf4 0x00

0x00 0x00 0x00 0x20

...

but 0x2000 works well.

=> hab_status

Secure boot disabled

HAB Configuration: 0xf0, HAB State: 0x66

No HAB Events Found!

Generated u-boot.imx with 0x4000 is still unbootable. Do you have any information about the CONFIG_CSF_SIZE usage?

Regards,

Birger

[Yuri]

Hello,

  Please look at the following 

https://community.nxp.com/message/638863 

Regards,

Yuri.

[Yuri]

Hello,

  Perhaps, the following helps :

HABv4 Signed U-Boot fails to run standalone from NAND Flash on a i.MX6 SoC

Have a great day,
Yuri

-----------------------------------------------------------------------------------------------------------------------
Note: If this post answers your question, please click the Correct Answer button. Thank you!
-----------------------------------------------------------------------------------------------------------------------