how to secure boot rtos images

[pisces]

Hello NXP experts. Based on IMX6, we have secure boot our uboot by following your documents (secure_boot_on_imx6.pdf). Now if the fuse of the imx6sx is blown, if we want to use mfg tool to download a small RTOS software to RAM, how we sign this RTOS software to make it run on a fused board ? thanks.

[Harvey021]

Hi @pisces 

You can sign the RTOS as you did with uboot, just make sure that the address in the IVT is valid and that the contents are correct. You can refer to the appendix in the AN4581 as attached, note that you need to delete the DCD first, and then restore the DCD.

Best regards

Harvey

[Harvey021]

Hi @pisces

Is your ROTS software to run on Core A or Core M? 

Best regards

Harvey

[pisces]

Hi 

any updates?

thanks.

[pisces]

Hello Harvey021

Our small RTOS run on core A.

On an open (not fused) board, our small RTOS software can run well by using mfg tool to download.

But on closed board, it can not run. I know I need to sign the RTOS, but not like the uboot, there is no documents found to guide how we should sign a none uboot software.

Thanks.