SECURE BOOT IMX8MP

[xae-abhishek]

While implementing Secure Boot on an i.MX8MP-based device, we thoroughly tested using hab_status. Everything worked as expected—no HAB events were reported. We ran tests over 10 times with different image-signing setups and consistently saw no HAB events when the image was properly signed (we did see events when the image was unsigned).

After finalizing the setup, we closed the device. However, with the same device and the exact same signed image, the boot image started getting rejected.
If there had been an issue with image signing or SRK keys, it should have been reflected in hab_status, but there were no such errors during testing.

I’m attaching our Secure Boot rejection logs:

• SPL_ONLY.txt – Default configuration without FIT image optional configs

• SPL_FIT.txt – With FIT image optional configs and csf_fit.txt

[Harvey021]

Hi @xae-abhishek 

I've already replied back to you in another ticket from you. Please let me know if any from there.

Regards

Harvey