U-Boot: git clone -b toradex_2020.07 git://git.toradex.com/u-boot-toradex.git
Added to configs/apalis_imx6_defconfig:
CONFIG_IMX_HAB=y
CONFIG_DFU=y
CONFIG_DFU_OVER_USB=y
CONFIG_DFU_MMC=y
CONFIG_CMD_DFU=y
After running
make apalis_imx6_defconfig; make
I take SPL and u-boot-ivt.img for signing with CST tool, version 3.3.1. The respective log-files are as follows:
SPL.log:
Image Type: Freescale IMX Boot Image
Image Ver: 2 (i.MX53/6/7 compatible)
Mode: DCD
Data Size: 53344 Bytes = 52.09 KiB = 0.05 MiB
Load Address: 00907420
Entry Point: 00908000
HAB Blocks: 0x00907400 0x00000000 0x0000ac00
DCD Blocks: 0x0000002c 0x00910000 0x00000004
u-boot-ivt.img.log:
Image Name: U-Boot 2020.07-07893-g72c5548771
Created: Thu Mar 18 13:41:20 2021
Image Type: ARM U-Boot Firmware with HABv4 IVT (uncompressed)
Data Size: 516128 Bytes = 504.03 KiB = 0.49 MiB
Load Address: 17800000
Entry Point: 17800000
HAB Blocks: 0x177fffc0 0x0000 0x0007c020
# Hint: changing the HAB Blocks address value to 0x17800000 does not change anything
# 0x7c020 is the length of the image file, the IVT is recorded in the last 64 bytes
After successful signing both images with the following csf-file («addr», «offs», «len», «image» substituted with entries from the log files above)
[Header]
Version = 4.2
Hash Algorithm = sha256
Engine = ANY
Engine Configuration = 0
Certificate Format = X509
Signature Format = CMS
[Install SRK]
File = "../crts/SRK_1_2_3_4_table.bin"
Source index = 0
[Install CSFK]
File = "../crts/CSF1_1_sha256_4096_65537_v3_usr_crt.pem"
[Authenticate CSF]
[Install Key]
Verification index = 0
Target index = 2
File = "../crts/IMG1_1_sha256_4096_65537_v3_usr_crt.pem"
[Authenticate Data]
Verification index = 2
..Blocks = «addr» «offs» «len» «image»
I get the following result (the ‘HAB Report Status’ line has been inserted by me to get the exact result of hab_rvt_report_status):
Industrial temperature grade DDR3 timings.
Trying to boot from MMC1
hab fuse not enabled
U-Boot 2020.07-07893-g72c5548771-dirty (Mar 16 2021 - 12:30:38 +0100)
CPU: Freescale i.MX6Q rev1.6 at 792MHz
CPU: Industrial temperature grade (-40C to 105C) at 40C
Reset cause: WDOG
DRAM: 2 GiB
PMIC: device id: 0x10, revision id: 0x21, programmed
MMC: FSL_SDHC: 1, FSL_SDHC: 2, FSL_SDHC: 0
Loading Environment from MMC... OK
In: serial
Out: serial
Err: serial
Model: Toradex Apalis iMX6 Quad 2GB IT V1.1C, Serial# 10652058
Net: eth0: ethernet@2188000
Hit any key to stop autoboot: 0
Apalis iMX6 # hab_status
Secure boot disabled
HAB Report Status: 0x69 (MX6DQP: 0, MX6DQ, 1, SOC_REV: 0x16, HAB_RVT_BASE: 0x00000098)
HAB Configuration: 0xf0, HAB State: 0x66
Apalis iMX6 #
Result: HAB_WARNING (0x69), "No HAB Events found!" message missing
