Hi experts,
I started working on secure boot HAB and I have a few questions about u-boot signature.
I make an u-boot.imx-ivt_signed, then I dd that file into the sdcard. When I run boot mode, command "hab_status", it shows
U-Boot 2015.04-imx_v2018.03_4.14.98_2.0.0_ga+g2087693 (Aug 20 2019 - 03:59:08)
CPU: Freescale i.MX6UL rev1.1 at 396 MHz
CPU: Temperature 35 C
Reset cause: POR
Board: MX6UL 14x14 EVK
I2C: ready
DRAM: 512 MiB
MMC: FSL_SDHC: 0, FSL_SDHC: 1
*** Warning - bad CRC, using default environment
Display: TFT43AB (480x272)
Video: 480x272x24
In: serial
Out: serial
Err: serial
switch to partitions #0, OK
mmc1 is current device
Net: got MAC1 address from fuse: 00:04:9f:04:b7:49
FEC1
Normal Boot
Hit any key to stop autoboot: 0
=> hab_status
Secure boot disabled
HAB Configuration: 0xf0, HAB State: 0x66
--------- HAB Event 1 -----------------
event data:
0xdb 0x00 0x08 0x42 0x33 0x11 0xcf 0x00
STS = HAB_FAILURE (0x33)
RSN = HAB_INV_CSF (0x11)
CTX = HAB_CTX_CSF (0xCF)
ENG = HAB_ENG_ANY (0x00)
--------- HAB Event 2 -----------------
event data:
0xdb 0x00 0x14 0x42 0x33 0x0c 0xa0 0x00
0x00 0x00 0x00 0x00 0x87 0x7f 0xf4 0x00
0x00 0x00 0x00 0x20
STS = HAB_FAILURE (0x33)
RSN = HAB_INV_ASSERTION (0x0C)
CTX = HAB_CTX_ASSERT (0xA0)
ENG = HAB_ENG_ANY (0x00)
--------- HAB Event 3 -----------------
event data:
0xdb 0x00 0x14 0x42 0x33 0x0c 0xa0 0x00
0x00 0x00 0x00 0x00 0x87 0x7f 0xf4 0x2c
0x00 0x00 0x01 0xe8
STS = HAB_FAILURE (0x33)
RSN = HAB_INV_ASSERTION (0x0C)
CTX = HAB_CTX_ASSERT (0xA0)
ENG = HAB_ENG_ANY (0x00)
--------- HAB Event 4 -----------------
event data:
0xdb 0x00 0x14 0x42 0x33 0x0c 0xa0 0x00
0x00 0x00 0x00 0x00 0x87 0x7f 0xf4 0x20
0x00 0x00 0x00 0x01
STS = HAB_FAILURE (0x33)
RSN = HAB_INV_ASSERTION (0x0C)
CTX = HAB_CTX_ASSERT (0xA0)
ENG = HAB_ENG_ANY (0x00)
--------- HAB Event 5 -----------------
event data:
0xdb 0x00 0x14 0x42 0x33 0x0c 0xa0 0x00
0x00 0x00 0x00 0x00 0x87 0x80 0x00 0x00
0x00 0x00 0x00 0x04
STS = HAB_FAILURE (0x33)
RSN = HAB_INV_ASSERTION (0x0C)
CTX = HAB_CTX_ASSERT (0xA0)
ENG = HAB_ENG_ANY (0x00)
Then I run e-fuse, with "fuse prog -y 3 ..." the value isn't writen in to the board (use command "fuse read 3 0" to check); with "fuse override -y 3 ..." the value will be clear when I reset the board.
U-Boot 2015.04-imx_v2018.03_4.14.98_2.0.0_ga+g2087693 (Aug 20 2019 - 03:59:08)
CPU: Freescale i.MX6UL rev1.1 at 396 MHz
CPU: Temperature 43 C
Reset cause: WDOG
Board: MX6UL 14x14 EVK
I2C: ready
DRAM: 512 MiB
MMC: FSL_SDHC: 0, FSL_SDHC: 1
*** Warning - bad CRC, using default environment
Display: TFT43AB (480x272)
Video: 480x272x24
In: serial
Out: serial
Err: serial
switch to partitions #0, OK
mmc1 is current device
Net: got MAC1 address from fuse: 00:04:9f:04:b7:49
FEC1
Normal Boot
Hit any key to stop autoboot: 0
=> fuse prog -y 3 0 0x97A948D5
Programming bank 3 word 0x00000000 to 0x97a948d5...
=> fuse read 3 0
Reading bank 3:
Word 0x00000000: ffffffff
=> fuse override -y 3 0 0x97A948D5
Overriding bank 3 word 0x00000000 with 0x97a948d5...
=> fuse read 3 0
Reading bank 3:
Word 0x00000000: 97a948d5
=> save
Saving Environment to MMC...
Writing to MMC(1)... done
=> reset
resetting ...
U-Boot 2015.04-imx_v2018.03_4.14.98_2.0.0_ga+g2087693 (Aug 20 2019 - 03:59:08)
CPU: Freescale i.MX6UL rev1.1 at 396 MHz
CPU: Temperature 44 C
Reset cause: WDOG
Board: MX6UL 14x14 EVK
I2C: ready
DRAM: 512 MiB
MMC: FSL_SDHC: 0, FSL_SDHC: 1
Display: TFT43AB (480x272)
Video: 480x272x24
In: serial
Out: serial
Err: serial
switch to partitions #0, OK
mmc1 is current device
Net: got MAC1 address from fuse: 00:04:9f:04:b7:49
FEC1
Normal Boot
Hit any key to stop autoboot: 0
=> fuse read 3 0
Reading bank 3:
Word 0x00000000: ffffffff
I don't know what the problem do I have? And how can I fix it?
Thanks,
Nam.
Please note that "fuse override" command overrides only shadow register.
This operation does not affects the fusebox, it will be cleaned after reset.
This command may be useful for testing purpose.
You need to use "fuse prog" instead.
Have a great day,
Victor
-----------------------------------------------------------------------------------------------------------------------
Note: If this post answers your question, please click the Correct Answer button. Thank you!
-----------------------------------------------------------------------------------------------------------------------
Hi Victor,
Thanks for your help!
But my secure_boot always shows error
=> hab_status
Secure boot disabled
HAB Configuration: 0xf0, HAB State: 0x66
--------- HAB Event 1 -----------------
event data:
0xdb 0x00 0x08 0x42 0x33 0x11 0xcf 0x00
STS = HAB_FAILURE (0x33)
RSN = HAB_INV_CSF (0x11)
CTX = HAB_CTX_CSF (0xCF)
ENG = HAB_ENG_ANY (0x00)
From the first time to now, I have never get
No HAB Events Found!
I don't know the cause of this problem.