iMX6q - SecureBoot issues with hab_status not found

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

iMX6q - SecureBoot issues with hab_status not found

837 Views
saravanan_jayap
Contributor I

iMX 6Q - Secure Boot Issues. After enabling SECURE_BOOT , the bootloader prompt does not support HAB. All the hab_status command results in Unknown Command error. Please see my logs below:

(Tried UBoot 2015 and latest releases as well)

strings u-boot.imx.nitogen | grep "hab"
hab fuse not enabled

hab entry function fail
hab exit function fail
hab_auth_img_or_fail
hab_failsafe
hab_auth_img

hab_status
u-boot.cfg
#define CONFIG_SECURE_BOOT 1
 cat  u-boot.map | grep "hab"
 .text.do_hab_failsafe.part.1
 .text.do_hab_failsafe
 .text.imx_hab_is_enabled
                0x00000000178051cc                imx_hab_is_enabled
 .text.get_hab_status
 .text.do_hab_status
 .text.imx_hab_authenticate_image
                0x0000000017805644                imx_hab_authenticate_image
 .text.hab_caam_clock_enable
                0x0000000017806b18                hab_caam_clock_enable
 .rodata.get_hab_status.str1.1
 .rodata.imx_hab_authenticate_image.str1.1
 .rodata.imx_hab_is_enabled.str1.1
 .data.hab_contexts
 .data.hab_engines
 .data.hab_reasons
 .data.hab_statuses
 .u_boot_list_2_cmd_2_hab_auth_img
                0x000000001787e444                _u_boot_list_2_cmd_2_hab_auth_img
 .u_boot_list_2_cmd_2_hab_auth_img_or_fail
                0x000000001787e460                _u_boot_list_2_cmd_2_hab_auth_img_or_fail
 .u_boot_list_2_cmd_2_hab_failsafe
                0x000000001787e47c                _u_boot_list_2_cmd_2_hab_failsafe
 .u_boot_list_2_cmd_2_hab_status
                0x000000001787e498                _u_boot_list_2_cmd_2_hab_status
 .rel.text.imx_hab_is_enabled
 .rel.text.get_hab_status
 .rel.text.imx_hab_authenticate_image
 .rel.text.hab_caam_clock_enable
 .rel.u_boot_list_2_cmd_2_hab_auth_img
 .rel.u_boot_list_2_cmd_2_hab_auth_img_or_fail
 .rel.u_boot_list_2_cmd_2_hab_failsafe
 .rel.u_boot_list_2_cmd_2_hab_status
cat u-boot.imx.log | grep HAB
HAB Blocks:   0x177ff400 0x00000000 0x0008dc00
Labels (3)
0 Kudos
1 Reply

771 Views
igorpadykov
NXP Employee
NXP Employee

Hi Sharavan

if you are using nitrogen boards one can look at boundary devices help:

https://boundarydevices.com/high-assurance-boot-hab-dummies/ 

For nxp releases one can follow

habv4\imx\doc - uboot-imx - i.MX U-Boot 

Best regards
igor
-----------------------------------------------------------------------------------------------------------------------
Note: If this post answers your question, please click the Correct Answer button. Thank you!
-----------------------------------------------------------------------------------------------------------------------

0 Kudos