iMX6, lf_v2022.04 u-boot and HAB support

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

iMX6, lf_v2022.04 u-boot and HAB support

Jump to solution
326 Views
lisandropm
Contributor II

Hi! We have a device using an iMX6 with Dunfell and are porting it to Yocto Kirkstone. We want to keep using SecureBoot/HAB on it. By looking at a recent u-boot's code [0] it would be a matter of enabling CONFIG_IMX_HAB... except it fails to build pretty quickly:

git/arch/arm/mach-imx/hab.c:875: undefined reference to `fuse_read'

And indeed the fuse_read() function seems to be only defined for iMX8, even if the doc says this should be supported from iMX6 to 8.

Older instructions for enabling this talk about CONFIG_SECURE_BOOT, which does not seems to exist anymore on u-boot.

So, what's the correct way to enable HAB on iMX6? A solution using u-boot-imx is just fine.

[0] I used 2022.04 as a starting point, but I see the same issue on 2023.04.

0 Kudos
1 Solution
279 Views
lisandropm
Contributor II

Thanks to the u-boot people the root issue has been found.

CONFIG_SPL_DRIVERS_MISC=y

↑ This was also needed, and should probably be selected by CONFIG_IMX_HAB=y.

View solution in original post

0 Kudos
3 Replies
280 Views
lisandropm
Contributor II

Thanks to the u-boot people the root issue has been found.

CONFIG_SPL_DRIVERS_MISC=y

↑ This was also needed, and should probably be selected by CONFIG_IMX_HAB=y.

0 Kudos
302 Views
Bio_TICFSL
NXP TechSupport
NXP TechSupport
0 Kudos
296 Views
lisandropm
Contributor II

Thanks, but that will not work. Check that the first thing to do is to enable CONFIG_SECURE_BOOT. But now:

$ git clone https://github.com/nxp-imx/uboot-imx.git
$ cd uboot-imx/0
$ git branch
* lf_v2022.04
$ grep -Rn CONFIG_SECURE_BOOT
$

So that does not seems to be an option any more.

0 Kudos