can u-boot command hab_auth_img be used to verify a signed u-boot.imx in imx6ull?

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

can u-boot command hab_auth_img be used to verify a signed u-boot.imx in imx6ull?

1,062 Views
changbaoma
Contributor IV

Hello NXP Experts,

I can verify my signed zImage using u-boot command hab_auth_img.

But i can't verify the my signed u-boot image itself(u-boot-signed.imx).

Here is the log:

=> tftp 0x877ff400 u-boot-signed.imx;hab_auth_img 0x877ff400 0x400
FEC1 Waiting for PHY auto negotiation to complete.... done
Using FEC1 device
TFTP from server 192.168.0.10; our IP address is 192.168.0.1
Filename 'u-boot-signed.imx'.
Load address: 0x877ff400
Loading: ##########################
69.3 KiB/s
done
Bytes transferred = 367416 (59b38 hex)

Authenticate image from DDR location 0x877ff400...

Secure boot enabled

HAB Configuration: 0xcc, HAB State: 0x99

--------- HAB Event 1 -----------------
event data:
0xdb 0x00 0x08 0x42 0x33 0x05 0x0a 0x00

STS = HAB_FAILURE (0x33)
RSN = HAB_INV_IVT (0x05)
CTX = HAB_CTX_AUTHENTICATE (0x0A)
ENG = HAB_ENG_ANY (0x00)

 

 (u-boot version: U-Boot 2016.03 from NXP)

I set 0x400 the second parameter of hab_auth_img according to 

changbaoma_0-1650019737922.png

 

Also try ‘hab_auth_img 0x877ff400 0x0’,but fail too.

 

Any suggestion?

0 Kudos
Reply
1 Reply

1,022 Views
Zhiming_Liu
NXP TechSupport
NXP TechSupport

Maybe you use wrong hab_auth_img command.

hab_auth_img {DDR_LOCATION} {IMG_SIZE}

0 Kudos
Reply