iMx6 SabreLite BD - HABv4 Secure Boot Testing

取消
显示结果 
显示  仅  | 搜索替代 
您的意思是: 

iMx6 SabreLite BD - HABv4 Secure Boot Testing

613 次查看
ashokrajasekar
Contributor I

Hello,

I am using iMx6 SABRELITE Boundary Device Board. I am about to Test HABv4 Secure Boot using iMX6 SabreLite-BD platform.

I am using GitHub - Freescale/u-boot-fslc - (branch: 2018.03+fslc - )

I have configured for SecureBoot nad built u-boot.imx

Then I used CST(habimagegen.sh) script using ./cst command and

generated u-boot-signed-pad.bin u-boot image with CSF image with u-boot.bin.

I have followed HABv4 documents CST_UG.pdf and AN4581_imx_series_secureboot.pdf and secure_boot_on_imx6.pdf

I want to know Is it possible to Program the SRK Fuses temporarily not permanent for testing secure-boot & development purpose. Using "fuse prog" u-boot command will make the fuse register permanently programmed.

   fuse prog 3 0 0x20593752
   fuse prog 3 1 0x6ACE6962
   ...

   fuse prog 3 7 0x1190FD4D

Is there any way so that I can debug or test secure boot load & run the u-boot without permanently fusing the SRK hash.

into fuse map bank registers.

Thanks & Regards

Ashok

标签 (1)
0 项奖励
1 回复

477 次查看
igorpadykov
NXP Employee
NXP Employee

Hi Ashok

one can look at boundary devices tutorials:

High Assurance Boot (HAB) for dummies - Boundary Devices 

Secure boot on i.MX6 Nitrogen6X boards - Boundary Devices 

I am afraid there is no way to test it without permanently fusing SRK.

Best regards
igor
-----------------------------------------------------------------------------------------------------------------------
Note: If this post answers your question, please click the Correct Answer button. Thank you!
-----------------------------------------------------------------------------------------------------------------------

0 项奖励