i.MX28 and HABv4 boot

キャンセル
次の結果を表示 
表示  限定  | 次の代わりに検索 
もしかして: 

i.MX28 and HABv4 boot

1,129件の閲覧回数
filipaben
Contributor I

Hello,


We are trying to use the HAB feature of the iMX280 processor. We have fused the SRK hash in the OTP fuses, but when trying to boot our signed images, we get the following HAB events:

--- HAB Event 1 ---

0000 : DB 00 14 40 33 2D C0 00 BE 00 0C 02 09 00 00 01 : ...@3-..........

0010 : 00 00 02 5C : ...\

--- HAB Event 2 ---

0000 : DB 00 14 40 33 0C A0 00 00 00 00 00 00 00 00 14 : ...@3...........

0010 : 00 00 00 20 : ...

--- HAB Event 3 ---

0000 : DB 00 14 40 33 0C A0 00 00 00 00 00 00 00 0C 38 : ...@3..........8

0010 : 00 00 00 04 : ....

--- HAB Event 4 ---

0000 : DB 00 14 40 33 2D C0 00 BE 00 0C 02 09 00 00 01 : ...@3-..........

0010 : 00 00 02 5C : ...\

--- HAB Event 5 ---

0000 : DB 00 14 40 33 0C A0 00 00 00 00 00 00 00 1E A8 : ...@3...........

0010 : 00 00 00 20 : ...

--- HAB Event 6 ---

0000 : DB 00 14 40 33 0C A0 00 00 00 00 00 00 00 1B 2C : ...@3..........,

0010 : 00 00 00 04 : ....

--- HAB Event 7 ---

0000 : DB 00 14 40 33 2D C0 00 BE 00 0C 02 09 00 00 01 : ...@3-..........

0010 : 00 00 02 5C : ...\

--- HAB Event 8 ---

0000 : DB 00 14 40 33 0C A0 00 00 00 00 00 41 03 86 08 : ...@3.......A...

0010 : 00 00 00 20 : ...

--- HAB Event 9 ---

0000 : DB 00 14 40 33 0C A0 00 00 00 00 00 41 00 80 00 : ...@3.......A...

0010 : 00 00 00 04 : ....


As far as we can understand it, event 1, 4 & 7 indicate a HAB_OVR_STORAGE error.

The other events indicate a HAB_INV_ASSERTION for ivt & image entry for respectively power_prep, boot_prep and u-boot, which we suspect is a consequence of event 1,4 & 7.

Does anyone know what event 1,4 & 7 mean exactly  since we couldn't find a description of those anywhere ?

Many Thanks,

Filip Aben

ラベル(2)
0 件の賞賛
2 返答(返信)

726件の閲覧回数
filipaben
Contributor I

This is solved btw. We used 4096-bit certificates and it turns out the i.MX280 supports max 2048-bit certificates.

0 件の賞賛

726件の閲覧回数
pabloanton
Contributor I

Hello Filip,

I am having problems using HAB in my i.mx53 board and reading your question and your answer (to yourself) I guess you was able to fuse SRK_HASH values several times, am I right?

I do not want to take the risk of fusing the SRK_HASH because it is suppose to be OTP register, could you help me with your personal experience?

Thanks in advance,

Pablo Antón.

0 件の賞賛