IMXRT1172 flashloader not starting

[Kaidou]

Hello.

I'm working with a IMXRT1172 board. I enabled the Encrypted (OTFAD) authenticated secure boot and enabled the HAB and I was able to flash the board.

Then yesterday i tried again to flash a new image and now the flashloader is not starting.

I get the following error:

### Load FlashLoader ###
blhost -t 5000 -u 0x1FC9,0x013D -j -- load-image "..\secure_provisioning0\bootable_images\signed_MIMXRT1172_flashloader.bin"
{
"command": "load-image",
"response": [],
"status": {
"description": "0 (0x0) Success.",
"value": 0
}
}
blhost succeeded
### Waiting FlashLoader to be initialized for 5 seconds ###
### Timeout wait value can be adjusted from Preferences ###
### Check presence of FlashLoader ###
blhost -t 2000 -u 0x15A2,0x0073 -j -- get-property 7 0
ERROR:SPSDK: Selected 'usb' device not found.
blhost failed

The board is correctly connected and in serial downloader mode.
I tried with another board with secure boot not enabled and the connection works.

What might be the issue?

Thanks

[Kaidou]

Is it possible that the flashloader is signed with a different key than the SRK burnt into the board?

[diego_charles]

Hi @Kaidou 

Per my understanding , when HAB is enabled, the flashloader must be signed with keys derived from the same CA that was used to sign the image.

Are you still using the same workspace and keys ? Do you have the same certificate?

Best regards, 

Diego

[Kaidou]

Thanks for your reply!

I'm guessing I don't have the correct keys anymore. Is there a way to recover the board somehow?
But I don't have much hope.

[diego_charles · Accepted solution]

Hi @Kaidou 

If you selected the HAB closed life cycle there is no way to disable HAB or change keys, since they are already burned. 

[Kaidou]

Ok!

Thank you very much for your help!