can u-boot command hab_auth_img be used to verify a signed u-boot.imx in imx6ull?

キャンセル
次の結果を表示 
表示  限定  | 次の代わりに検索 
もしかして: 

can u-boot command hab_auth_img be used to verify a signed u-boot.imx in imx6ull?

1,063件の閲覧回数
changbaoma
Contributor IV

Hello NXP Experts,

I can verify my signed zImage using u-boot command hab_auth_img.

But i can't verify the my signed u-boot image itself(u-boot-signed.imx).

Here is the log:

=> tftp 0x877ff400 u-boot-signed.imx;hab_auth_img 0x877ff400 0x400
FEC1 Waiting for PHY auto negotiation to complete.... done
Using FEC1 device
TFTP from server 192.168.0.10; our IP address is 192.168.0.1
Filename 'u-boot-signed.imx'.
Load address: 0x877ff400
Loading: ##########################
69.3 KiB/s
done
Bytes transferred = 367416 (59b38 hex)

Authenticate image from DDR location 0x877ff400...

Secure boot enabled

HAB Configuration: 0xcc, HAB State: 0x99

--------- HAB Event 1 -----------------
event data:
0xdb 0x00 0x08 0x42 0x33 0x05 0x0a 0x00

STS = HAB_FAILURE (0x33)
RSN = HAB_INV_IVT (0x05)
CTX = HAB_CTX_AUTHENTICATE (0x0A)
ENG = HAB_ENG_ANY (0x00)

 

 (u-boot version: U-Boot 2016.03 from NXP)

I set 0x400 the second parameter of hab_auth_img according to 

changbaoma_0-1650019737922.png

 

Also try ‘hab_auth_img 0x877ff400 0x0’,but fail too.

 

Any suggestion?

0 件の賞賛
返信
1 返信

1,023件の閲覧回数
Zhiming_Liu
NXP TechSupport
NXP TechSupport

Maybe you use wrong hab_auth_img command.

hab_auth_img {DDR_LOCATION} {IMG_SIZE}

0 件の賞賛
返信