i.MX 8M Plus manufacture mode with HAB enabled

[olaan]

Hello!

I'm working on enabling secure boot on the i.MX 8M Plus and I have (for now) two questions I cannot find the answers to.

1. Will manufacture mode work with HAB enabled? The applications processor reference manual is very sparse with information on manufacture mode.

2. Where can I find the most recent AN4581? The one I have is from 2018.

Cheers.

[olaan]

Thanks for the replies. Some follow-up questions though.

1. Will manufacture mode enable the use of an SD card (with a signed boot image) to recover in the case of a corrupted boot media, or is it only applicable for unprogrammed cards? The wording in the reference manual is not clear: "[...] allow a system to boot from a SD/MMC card on a board with unprogrammed boot media or to upgrade the image on a boot device"

2. Then where can I find information on secure boot for i.MX8? It is not covered in AN4581.

Cheers. 

[JorgeCas]

Hello,

1. Will manufacture mode enable the use of an SD card (with a signed boot image) to recover in the case of a corrupted boot media, or is it only applicable for unprogrammed cards?

For both, if there is not a bootable image in selected boot source will trigger manufacture mode.

2. Then where can I find information on secure boot for i.MX8? It is not covered in AN4581.

I suggest you take a look in AN13994 and AN12312 application notes. All the related secure boot documents are in documentation section of i.MX8 web page.

[JorgeCas]

Hello,

1.

By default, the SD/MMC manufacture mode is enabled. Blow the fuse of the RECOVERY_SDMMC_BOOT_DIS to disable it.

If you have HAB enabled, you should have a bootable image in boot source so, manufacture mode will not be triggered.

2.

That is the latest version.

Best regards.