i.MX28 and HABv4 boot

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

i.MX28 and HABv4 boot

1,105 Views
filipaben
Contributor I

Hello,


We are trying to use the HAB feature of the iMX280 processor. We have fused the SRK hash in the OTP fuses, but when trying to boot our signed images, we get the following HAB events:

--- HAB Event 1 ---

0000 : DB 00 14 40 33 2D C0 00 BE 00 0C 02 09 00 00 01 : ...@3-..........

0010 : 00 00 02 5C : ...\

--- HAB Event 2 ---

0000 : DB 00 14 40 33 0C A0 00 00 00 00 00 00 00 00 14 : ...@3...........

0010 : 00 00 00 20 : ...

--- HAB Event 3 ---

0000 : DB 00 14 40 33 0C A0 00 00 00 00 00 00 00 0C 38 : ...@3..........8

0010 : 00 00 00 04 : ....

--- HAB Event 4 ---

0000 : DB 00 14 40 33 2D C0 00 BE 00 0C 02 09 00 00 01 : ...@3-..........

0010 : 00 00 02 5C : ...\

--- HAB Event 5 ---

0000 : DB 00 14 40 33 0C A0 00 00 00 00 00 00 00 1E A8 : ...@3...........

0010 : 00 00 00 20 : ...

--- HAB Event 6 ---

0000 : DB 00 14 40 33 0C A0 00 00 00 00 00 00 00 1B 2C : ...@3..........,

0010 : 00 00 00 04 : ....

--- HAB Event 7 ---

0000 : DB 00 14 40 33 2D C0 00 BE 00 0C 02 09 00 00 01 : ...@3-..........

0010 : 00 00 02 5C : ...\

--- HAB Event 8 ---

0000 : DB 00 14 40 33 0C A0 00 00 00 00 00 41 03 86 08 : ...@3.......A...

0010 : 00 00 00 20 : ...

--- HAB Event 9 ---

0000 : DB 00 14 40 33 0C A0 00 00 00 00 00 41 00 80 00 : ...@3.......A...

0010 : 00 00 00 04 : ....


As far as we can understand it, event 1, 4 & 7 indicate a HAB_OVR_STORAGE error.

The other events indicate a HAB_INV_ASSERTION for ivt & image entry for respectively power_prep, boot_prep and u-boot, which we suspect is a consequence of event 1,4 & 7.

Does anyone know what event 1,4 & 7 mean exactly  since we couldn't find a description of those anywhere ?

Many Thanks,

Filip Aben

Labels (2)
0 Kudos
2 Replies

702 Views
filipaben
Contributor I

This is solved btw. We used 4096-bit certificates and it turns out the i.MX280 supports max 2048-bit certificates.

0 Kudos

702 Views
pabloanton
Contributor I

Hello Filip,

I am having problems using HAB in my i.mx53 board and reading your question and your answer (to yourself) I guess you was able to fuse SRK_HASH values several times, am I right?

I do not want to take the risk of fusing the SRK_HASH because it is suppose to be OTP register, could you help me with your personal experience?

Thanks in advance,

Pablo Antón.

0 Kudos