i.mx8 mini HABv4
I am trying to get HABv4 working on the HABv4 mini. The system is running Android version 9 and is on the evaluation board. I have followed the instructions using the User Guide :
i.MX AndroidTM Security User's Guide
I have tried 2 scenarios signing the binaries with the aforementioned userguide (Section 3.1.2 Verifying Images with HABv4)
Scenario 1
Note secure boot is enabled in the appropriate defconfigs
u-boot-imx8mm.imx (signed)
u-boot-imx8mm-evk-uuu.imx (signed)
This results in Security Events of Invalid signature:
Secure boot disabled
HAB Configuration: 0xf0, HAB State: 0x66
--------- HAB Event 1 -----------------
event data:
0xdb 0x00 0x08 0x43 0x33 0x11 0xcf 0x00
STS = HAB_FAILURE (0x33)
RSN = HAB_INV_CSF (0x11)
CTX = HAB_CTX_CSF (0xCF)
ENG = HAB_ENG_ANY (0x00)
.... (Also events 2, 3, 4) -- not shown for brevity
Scenario 2:
Note secure boot is enabled in the appropriate defconfigs
1. u-boot-imx8mm-evk-uuu.imx (signed)
2. u-boot-imx8mm-trusty.imx (signed)
Does not boot at all
My questions:
1. Is scenario 1 possible without using Trusty OS? If so, what am I doing wrong?
2. Do I require Trusty OS for Android? If so what am I doing wrong in Scenario 2?
My preference would be not to use Trusty OS and continue with Scenario 1. Any help would be greatly appreciated.
