iMX6UL Secure Boot (HAB) "hab_status" unknown command

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

iMX6UL Secure Boot (HAB) "hab_status" unknown command

1,625 Views
memrekaraaslan
Contributor II

Hello Community.

I am trying secure boot with HAB. I completed all steps (http://variwiki.com/index.php?title=High_Assurance_Boot&release=RELEASE_SUMO_V1.1_DART-6UL) and I insert the SD card on my board. Power up and write the "hab_status" command in u-boot environment but return to me;

=> hab_status
Unknown command 'hab_status' - try 'help'

I followed the AN4581.pdf 

 

In /uboot-imx/include/configs/mx6_common.h, I uncomment for SECURE mode support;

/* uncomment for SECURE mode support */
#define CONFIG_SECURE_BOOT             // uncomment this

/* Secure boot (HAB) support */
#ifdef CONFIG_SECURE_BOOT
#define CONFIG_CSF_SIZE 0x2000
#if !defined(CONFIG_MX6ULL) && !defined(CONFIG_MX6SLL) && !defined(CONFIG_MX6SL)
#define CONFIG_CMD_DEKBLOB

...

but it doesn't work. It gives same response in u-boot command line : "hab_status" unkonwn command..

What can I do for this issue? 

Thanks

0 Kudos
3 Replies

1,457 Views
saravanan_jayap
Contributor I

I am facing similar issues with iMXQ ,hab_status unknown command, Can you guys share  the fix. Thanks in Advance

0 Kudos

1,457 Views
memrekaraaslan
Contributor II

And then this is my u-boot Makefile :

CONFIG_ARM=y
CONFIG_ARCH_MX6=y
CONFIG_SPL_GPIO_SUPPORT=y
CONFIG_SPL_LIBCOMMON_SUPPORT=y
CONFIG_SPL_LIBGENERIC_SUPPORT=y
CONFIG_SECURE_BOOT=y
CONFIG_TARGET_MX6UL_VAR_DART=y
CONFIG_SPL_MMC_SUPPORT=y
CONFIG_SPL_SERIAL_SUPPORT=y
CONFIG_SPL_LIBDISK_SUPPORT=y
CONFIG_SPL_WATCHDOG_SUPPORT=y
CONFIG_VIDEO=y
CONFIG_SYS_EXTRA_OPTIONS="IMX_CONFIG=arch/arm/imx-common/spl_sd.cfg"
CONFIG_BOOTDELAY=1
CONFIG_SPL=y
CONFIG_SPL_EXT_SUPPORT=y
CONFIG_SPL_I2C_SUPPORT=y
CONFIG_HUSH_PARSER=y
CONFIG_CMD_BOOTZ=y
# CONFIG_CMD_IMLS is not set
CONFIG_CMD_MEMTEST=y
CONFIG_CMD_MMC=y
CONFIG_CMD_I2C=y
CONFIG_CMD_USB=y
CONFIG_CMD_USB_MASS_STORAGE=y
CONFIG_CMD_GPIO=y
CONFIG_CMD_DHCP=y
CONFIG_CMD_PING=y
CONFIG_CMD_CACHE=y
CONFIG_CMD_TIME=y
CONFIG_CMD_EXT2=y
CONFIG_CMD_EXT4=y
CONFIG_CMD_EXT4_WRITE=y
CONFIG_CMD_FAT=y
CONFIG_CMD_FS_GENERIC=y
CONFIG_USB=y
CONFIG_USB_STORAGE=y
CONFIG_USB_GADGET=y
CONFIG_CI_UDC=y
CONFIG_USB_GADGET_DOWNLOAD=y
CONFIG_G_DNL_MANUFACTURER="Variscite"
CONFIG_G_DNL_VENDOR_NUM=0x0525
CONFIG_G_DNL_PRODUCT_NUM=0xa4a5
# CONFIG_VIDEO_SW_CURSOR is not set
CONFIG_OF_LIBFDT=y

0 Kudos

1,457 Views
igorpadykov
NXP Employee
NXP Employee

Hi Emre

may be recommended to use variscite uboot

GitHub - varigit/uboot-imx at imx_v2018.03_4.14.98_2.0.0_ga_var01 

documentation:

uboot-imx/mx6_mx7_secure_boot.txt at imx_v2018.03_4.14.98_2.0.0_ga_var01 · varigit/uboot-imx · GitHu... 

"Unknown command" can be debugged in hab.c

uboot-imx/hab.c at imx_v2018.03_4.14.98_2.0.0_ga_var01 · varigit/uboot-imx · GitHub 

Best regards
igor
-----------------------------------------------------------------------------------------------------------------------
Note: If this post answers your question, please click the Correct Answer button. Thank you!
-----------------------------------------------------------------------------------------------------------------------

0 Kudos