is it possible to signature zImage only and not signature dtb in imx6 secure boot?

cancel
Showing results for 
Search instead for 
Did you mean: 

is it possible to signature zImage only and not signature dtb in imx6 secure boot?

103 Views
Contributor III

if imx6 only signature and authenticate zImage and not signature dtb,  it hang when bootz :

=> bootz 0x80800000 - 0x82000000

Kernel image @ 0x80800000 [ 0x000000 - 0x584468 ]

## Flattened Device Tree blob at 82000000

  Booting using the fdt blob at 0x82000000

 

Authenticate image from DDR location 0x80800000...

 

Secure boot enabled

 

HAB Configuration: 0xcc, HAB State: 0x99

No HAB Events Found!

 

  Using Device Tree in place at 82000000, end 8200b50b

 

Starting kernel ...

(no any more output)

 

what may be the problem?

0 Kudos
2 Replies

91 Views
NXP TechSupport
NXP TechSupport

Hello changboama,

 

You have to secure the uboot but for boot the uboot image you need a secure dtb:

https://github.com/u-boot/u-boot/blob/master/doc/imx/habv4/guides/mx6_mx7_secure_boot.txt

 

Regards

 

0 Kudos

79 Views
Contributor III

hi @Bio_TICFSL 

the link you posted do not mentioned how to sign a dtb along with zImage?

i have sucessed to boot my cloded imx6ull with a signed u-boot, and sucess to hab_auth_img  the zImage.

please show me the way to sign a dtb along with zImage?

0 Kudos