Hello,
I am using iMx6 SABRELITE Boundary Device Board. I am about to Test HABv4 Secure Boot using iMX6 SabreLite-BD platform.
I am using GitHub - Freescale/u-boot-fslc - (branch: 2018.03+fslc - )
I have configured for SecureBoot nad built u-boot.imx
Then I used CST(habimagegen.sh) script using ./cst command and
generated u-boot-signed-pad.bin u-boot image with CSF image with u-boot.bin.
I have followed HABv4 documents CST_UG.pdf and AN4581_imx_series_secureboot.pdf and secure_boot_on_imx6.pdf
I want to know Is it possible to Program the SRK Fuses temporarily not permanent for testing secure-boot & development purpose. Using "fuse prog" u-boot command will make the fuse register permanently programmed.
fuse prog 3 0 0x20593752
fuse prog 3 1 0x6ACE6962
...
fuse prog 3 7 0x1190FD4D
Is there any way so that I can debug or test secure boot load & run the u-boot without permanently fusing the SRK hash.
into fuse map bank registers.
Thanks & Regards
Ashok
Hi Ashok
one can look at boundary devices tutorials:
High Assurance Boot (HAB) for dummies - Boundary Devices
Secure boot on i.MX6 Nitrogen6X boards - Boundary Devices
I am afraid there is no way to test it without permanently fusing SRK.
Best regards
igor
-----------------------------------------------------------------------------------------------------------------------
Note: If this post answers your question, please click the Correct Answer button. Thank you!
-----------------------------------------------------------------------------------------------------------------------