I have trouble activating the IMX_HAB feature. I get an
undefined reference to `sec_init'
but FSL_CAAM is active. I have tried to search for alle dependencies in menuconfig and after activating a SPL_CRYPTO_SUPPORT, I could finally build. But then when running U-Boot I get
Error binding driver 'caam_jr': -96
Some drivers failed to bind
Error binding driver 'simple_bus': -96
Some drivers failed to bind
Error binding driver 'simple_bus': -96
Some drivers failed to bind
Can you please list the needed features HAB depends on?
Hi,
We are using the Vendor fork for maaxboard_v2020.04_5.4.24_2.1.0 and experience exactly the same as above!
Just "CONFIG_AHAB_BOOT=y" fails to build ("undefined reference to `sec_init'") and adding the extra configs as listed above ("CONFIG_SPL_CRYPTO_SUPPORT=y") achieves a build, but at execution we also see:
Error binding driver 'caam_jr': -96
Some drivers failed to bind
Error binding driver 'simple_bus': -96
Some drivers failed to bind
Error binding driver 'simple_bus': -96
Some drivers failed to bind
We've raised this as a separate query: IMX8M-High-Assurance-Boot-HAB-failing-with-CAAM-error
But, since you have faced exactly the same, was wondering if you have any clues or guidance on how to fix this?
Hi @jclsn
Please find the link for all references.
guides\ahab\imx\doc - uboot-imx - i.MX U-Boot (codeaurora.org)
for example,
1.2 Preparing U-Boot to support AHAB secure boot features ---------------------------------------------------------- The U-Boot provides an alternative SPL target for i.MX8 and i.MX8x devices. The SPL is intended to be used by applications that requires a initial bootloader prior to initialize the ARM Trusted Firmware (ATF) and the U-Boot proper. The U-Boot support AHAB functions that are essential to completely authenticate the flash.bin image. On SPL targets only the SCFW, SPL and M4 IMG are authenticated at SCU ROM level, in order to authenticate the ATF and U-Boot proper it's necessary to call the SCU API sc_misc_seco_authenticate() function at SPL level. The support is enabled by adding CONFIG_AHAB_BOOT to the defconfig file used by your target: - Defconfig: CONFIG_AHAB_BOOT=y - Kconfig: ARM architecture -> Support i.MX 8 AHAB features
Best regards
Harvey