Trouble activating HAB for i.MX8

[jclsn]

I have trouble activating the IMX_HAB feature. I get an

undefined reference to `sec_init'

but FSL_CAAM is active. I have tried to search for alle dependencies in menuconfig and after activating a SPL_CRYPTO_SUPPORT, I could finally build. But then when running U-Boot I get

Error binding driver 'caam_jr': -96
Some drivers failed to bind
Error binding driver 'simple_bus': -96
Some drivers failed to bind
Error binding driver 'simple_bus': -96
Some drivers failed to bind

Can you please list the needed features HAB depends on?

[Bill-James-Ellis]

Hi,

We are using the Vendor fork for maaxboard_v2020.04_5.4.24_2.1.0 and experience exactly the same as above!

Just "CONFIG_AHAB_BOOT=y" fails to build ("undefined reference to `sec_init'") and adding the extra configs as listed above  ("CONFIG_SPL_CRYPTO_SUPPORT=y") achieves a build, but at execution we also see:

Error binding driver 'caam_jr': -96
Some drivers failed to bind
Error binding driver 'simple_bus': -96
Some drivers failed to bind
Error binding driver 'simple_bus': -96
Some drivers failed to bind

We've raised this as a separate query: IMX8M-High-Assurance-Boot-HAB-failing-with-CAAM-error 

But, since you have faced exactly the same, was wondering if you have any clues or guidance on how to fix this?

[Harvey021]

Hi @jclsn 

Please find the link for all references.

guides\ahab\imx\doc - uboot-imx - i.MX U-Boot (codeaurora.org)

for example, 

1.2 Preparing U-Boot to support AHAB secure boot features
----------------------------------------------------------

The U-Boot provides an alternative SPL target for i.MX8 and i.MX8x devices. The
SPL is intended to be used by applications that requires a initial bootloader
prior to initialize the ARM Trusted Firmware (ATF) and the U-Boot proper.

The U-Boot support AHAB functions that are essential to completely authenticate
the flash.bin image. On SPL targets only the SCFW, SPL and M4 IMG are
authenticated at SCU ROM level, in order to authenticate the ATF and U-Boot
proper it's necessary to call the SCU API sc_misc_seco_authenticate() function
at SPL level.

The support is enabled by adding CONFIG_AHAB_BOOT to the defconfig file used
by your target:

  - Defconfig:
    CONFIG_AHAB_BOOT=y
  - Kconfig:
    ARM architecture -> Support i.MX 8 AHAB features

Best regards

Harvey