Hello NXP Experts,
I can verify my signed zImage using u-boot command hab_auth_img.
But i can't verify the my signed u-boot image itself(u-boot-signed.imx).
Here is the log:
=> tftp 0x877ff400 u-boot-signed.imx;hab_auth_img 0x877ff400 0x400
FEC1 Waiting for PHY auto negotiation to complete.... done
Using FEC1 device
TFTP from server 192.168.0.10; our IP address is 192.168.0.1
Filename 'u-boot-signed.imx'.
Load address: 0x877ff400
Loading: ##########################
69.3 KiB/s
done
Bytes transferred = 367416 (59b38 hex)
Authenticate image from DDR location 0x877ff400...
Secure boot enabled
HAB Configuration: 0xcc, HAB State: 0x99
--------- HAB Event 1 -----------------
event data:
0xdb 0x00 0x08 0x42 0x33 0x05 0x0a 0x00
STS = HAB_FAILURE (0x33)
RSN = HAB_INV_IVT (0x05)
CTX = HAB_CTX_AUTHENTICATE (0x0A)
ENG = HAB_ENG_ANY (0x00)
(u-boot version: U-Boot 2016.03 from NXP)
I set 0x400 the second parameter of hab_auth_img according to
Also try ‘hab_auth_img 0x877ff400 0x0’,but fail too.
Any suggestion?
Maybe you use wrong hab_auth_img command.
hab_auth_img {DDR_LOCATION} {IMG_SIZE}