is it possible to signature zImage only and not signature dtb in imx6 secure boot?

[changbaoma]

if imx6 only signature and authenticate zImage and not signature dtb,  it hang when bootz :

=> bootz 0x80800000 - 0x82000000

Kernel image @ 0x80800000 [ 0x000000 - 0x584468 ]

## Flattened Device Tree blob at 82000000

  Booting using the fdt blob at 0x82000000

Authenticate image from DDR location 0x80800000...

Secure boot enabled

HAB Configuration: 0xcc, HAB State: 0x99

No HAB Events Found!

  Using Device Tree in place at 82000000, end 8200b50b

Starting kernel ...

(no any more output)

what may be the problem?

[Bio_TICFSL]

Hello changboama,

You have to secure the uboot but for boot the uboot image you need a secure dtb:

https://github.com/u-boot/u-boot/blob/master/doc/imx/habv4/guides/mx6_mx7_secure_boot.txt

Regards

[changbaoma]

hi @Bio_TICFSL 

the link you posted do not mentioned how to sign a dtb along with zImage?

i have sucessed to boot my cloded imx6ull with a signed u-boot, and sucess to hab_auth_img  the zImage.

please show me the way to sign a dtb along with zImage?