iMX8M Nano: using HABv4 to improve booting reliability

[wooosaiiii]

Hi,

we know iMX8M Nano supports HABv4 features for secure booting.

However we don't know what happens when SPL cannot be authenticated by ROM?

Does execution simply stop in ROM in that case on closed devices?

Or does ROM try to boot from other boot devices in sequence afterwards? e.g eMMC switch boot0 to boot1 hw partition?

If possible we would like to use HABv4 features to improve booting reliability e.g. recover from flash.bin binary corruption.

Is this something HABv4 can be used for?

[Yuri]

@wooosaiiii 
Hello,

  In security Closed configuration: "all detected errors are logged, and the boot flow is aborted
with the control being passed to the serial downloader. At this level, the execution does not
leave the internal ROM unless the target executable image is authenticated".

Regards,
Yuri.

[Yuri · Accepted solution]

@wooosaiiii 

Correct.

~Yuri.

[wooosaiiii]

Hi @Yuri 

OK. 

Based on your quote I would say execution stops in ROM and HABv4 cannot be used in such way to improve booting reliability, right?