i.MX28 and HABv4 boot

取消
显示结果 
显示  仅  | 搜索替代 
您的意思是: 

i.MX28 and HABv4 boot

1,117 次查看
filipaben
Contributor I

Hello,


We are trying to use the HAB feature of the iMX280 processor. We have fused the SRK hash in the OTP fuses, but when trying to boot our signed images, we get the following HAB events:

--- HAB Event 1 ---

0000 : DB 00 14 40 33 2D C0 00 BE 00 0C 02 09 00 00 01 : ...@3-..........

0010 : 00 00 02 5C : ...\

--- HAB Event 2 ---

0000 : DB 00 14 40 33 0C A0 00 00 00 00 00 00 00 00 14 : ...@3...........

0010 : 00 00 00 20 : ...

--- HAB Event 3 ---

0000 : DB 00 14 40 33 0C A0 00 00 00 00 00 00 00 0C 38 : ...@3..........8

0010 : 00 00 00 04 : ....

--- HAB Event 4 ---

0000 : DB 00 14 40 33 2D C0 00 BE 00 0C 02 09 00 00 01 : ...@3-..........

0010 : 00 00 02 5C : ...\

--- HAB Event 5 ---

0000 : DB 00 14 40 33 0C A0 00 00 00 00 00 00 00 1E A8 : ...@3...........

0010 : 00 00 00 20 : ...

--- HAB Event 6 ---

0000 : DB 00 14 40 33 0C A0 00 00 00 00 00 00 00 1B 2C : ...@3..........,

0010 : 00 00 00 04 : ....

--- HAB Event 7 ---

0000 : DB 00 14 40 33 2D C0 00 BE 00 0C 02 09 00 00 01 : ...@3-..........

0010 : 00 00 02 5C : ...\

--- HAB Event 8 ---

0000 : DB 00 14 40 33 0C A0 00 00 00 00 00 41 03 86 08 : ...@3.......A...

0010 : 00 00 00 20 : ...

--- HAB Event 9 ---

0000 : DB 00 14 40 33 0C A0 00 00 00 00 00 41 00 80 00 : ...@3.......A...

0010 : 00 00 00 04 : ....


As far as we can understand it, event 1, 4 & 7 indicate a HAB_OVR_STORAGE error.

The other events indicate a HAB_INV_ASSERTION for ivt & image entry for respectively power_prep, boot_prep and u-boot, which we suspect is a consequence of event 1,4 & 7.

Does anyone know what event 1,4 & 7 mean exactly  since we couldn't find a description of those anywhere ?

Many Thanks,

Filip Aben

标签 (2)
0 项奖励
2 回复数

714 次查看
filipaben
Contributor I

This is solved btw. We used 4096-bit certificates and it turns out the i.MX280 supports max 2048-bit certificates.

0 项奖励

714 次查看
pabloanton
Contributor I

Hello Filip,

I am having problems using HAB in my i.mx53 board and reading your question and your answer (to yourself) I guess you was able to fuse SRK_HASH values several times, am I right?

I do not want to take the risk of fusing the SRK_HASH because it is suppose to be OTP register, could you help me with your personal experience?

Thanks in advance,

Pablo Antón.

0 项奖励