imx8m plus HAB

[splkwill]

Hello,

I have an imx8m plus device where I would like to enable secure boot for our Yocto image. I'm trying to understand the process here. Currently I am reading AN4581 and have a couple of questions.

For the process outlined in AN4581, does this only sign the output image generated by Yocto, but we would need to extend the root trust to other software components (like Uboot, etc...)

Also, for the SRK table, is there a minimum number of certificates we need to supply? Is three the recommended?

Thanks

[splkwill · Accepted solution]

Hi, just reading the application note over again and I got my questions answered.

[hrlawrence]

Hi,
I am having the similar requirement to secure the first stage bootloader, u-boot and linux kernel with the yocto build could you please share the required documents

Thanks
Lawrence