Unable to update DEK blob for secondary AHAB container set using nxpimage ahab update-keyblob.

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Unable to update DEK blob for secondary AHAB container set using nxpimage ahab update-keyblob.

67 Views
udayMouli
Contributor I
  • Device: mimx9352 (i.MX93).
  • SPSDK version: spsdk 3.4.0
  • Boot image layout: Bootable image with two AHAB image container sets:
    • Primary set: Container 0 (ELE), Container 1 (SPL DDR).
    • Secondary set: Container 0 -> image 0(BL31), image 1 (U‑Boot), image 2 (TEE).
  • DEK: 256-bit, key_identifier: 0.

Build works fine when DEK blob is in provided in YAML file; production-time ahab update-keyblob on flash.bin updates SPL only.
I have taken reference of https://spsdk.readthedocs.io/en/latest/examples/ahab/imx93/imx93_signed_ahab_uboot.html 
How to select the secondary set/containers with update-keyblob? Is multi-set bootable image supported by this command? Recommended workflow to update blobs for secondary set without full rebuild?

Thanks,

Uday

0 Kudos
Reply
0 Replies
%3CLINGO-SUB%20id%3D%22lingo-sub-2258351%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3EUnable%20to%20update%20DEK%20blob%20for%20secondary%20AHAB%20container%20set%20using%20nxpimage%20ahab%20update-keyblob.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2258351%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3E%3CUL%3E%3CLI%3EDevice%3A%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Emimx9352%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E(i.MX93).%3C%2FLI%3E%3CLI%3ESPSDK%20version%3A%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Espsdk%203.4.0%3C%2FLI%3E%3CLI%3EBoot%20image%20layout%3A%20Bootable%20image%20with%20two%20AHAB%20image%20container%20sets%3A%3CUL%3E%3CLI%3EPrimary%20set%3A%20Container%200%20(ELE)%2C%20Container%201%20(SPL%20DDR).%3C%2FLI%3E%3CLI%3ESecondary%20set%3A%20Container%200%20-%26gt%3B%20image%200(BL31)%2C%20image%201%20(U%E2%80%91Boot)%2C%20image%202%20(TEE).%3C%2FLI%3E%3C%2FUL%3E%3C%2FLI%3E%3CLI%3EDEK%3A%20256-bit%2C%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Ekey_identifier%3A%200.%3C%2FLI%3E%3C%2FUL%3E%3CP%3E%3CSPAN%3EBuild%20works%20fine%20when%20DEK%20blob%20is%20in%20provided%20in%20YAML%20file%3B%20production-time%26nbsp%3B%3C%2FSPAN%3Eahab%20update-keyblob%3CSPAN%3E%26nbsp%3Bon%26nbsp%3B%3C%2FSPAN%3Eflash.bin%3CSPAN%3E%26nbsp%3Bupdates%20SPL%20only.%3CBR%20%2F%3EI%20have%20taken%20reference%20of%20%3CA%20href%3D%22https%3A%2F%2Fspsdk.readthedocs.io%2Fen%2Flatest%2Fexamples%2Fahab%2Fimx93%2Fimx93_signed_ahab_uboot.html%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Ehttps%3A%2F%2Fspsdk.readthedocs.io%2Fen%2Flatest%2Fexamples%2Fahab%2Fimx93%2Fimx93_signed_ahab_uboot.html%26nbsp%3B%3C%2FA%3E%3CBR%20%2F%3EHow%20to%20select%20the%20secondary%20set%2Fcontainers%20with%26nbsp%3Bupdate-keyblob%3F%20Is%20multi-set%20bootable%20image%20supported%20by%20this%20command%3F%20Recommended%20workflow%20to%20update%20blobs%20for%20secondary%20set%20without%20full%20rebuild%3F%3CBR%20%2F%3E%3CBR%20%2F%3EThanks%2C%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EUday%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E