Secure boot step-by-step procedure - IMX6S

[avenkatramani]

HI team,

I don't have any idea on the Secure boot, please pardon me. i am new to this Yocto and Linux build.

I need to implement secure boot, i cant get document/reference which show clear steps to do.

can any one share some ideas to implement secure boot.

thanks in advice.

[igorpadykov]

Hi Arunkumar

one can check AN4581 Secure Boot on i.MX50, i.MX53, i.MX 6 and i.MX7 Series using HABv4

https://www.nxp.com/docs/en/application-note/AN4581.pdf 

High Assurance Boot (HAB) for dummies - Boundary Devices 

Best regards
igor

[avenkatramani]

Hi Igor,

thanks for the replay.

i enable the #define CONFIG_SECURE_BOOT in mx6_common.h

and compile in yocto. i got the u-boot image.

I followed the steps to generate keys, then 

i stuck up here

in the AN4581 doc it refer "The authenticate data command blocks line contains three values". 

block : Address, Offset, Length.

how to find that and add in .csf file, please guide me to solve this. 

Regards,

Arunkumar

[avenkatramani]

Hi Igor,

any steps to do or any procedure to do the HAB.

Thanks in advice.