MCUBootUtility HAB Signed Image

[andydong1]

Hi all

I want to try HAB signed Image Boot 

I followed JayHeng's Blog but something got wrong

Can anyone help me ?

Thanks!

Best Regards,

Andy Dong

[kerryzhou]

Hi Andy Dong ,

1. Please download the newest MCUBootUtility tool from this link:

  https://github.com/JayHeng/NXP-MCUBootUtility/releases/tag/v2.0.0 

2. Please try the unsigned mode to download the code instead of the HAB signed boot mode

You can use the tool's image directly.

Just to download the code again, do you still meet the .py problem?

Please try it at first.

If the unsigned mode is working, then you can try the HAB mode again.

Any updated information from you side, please kindly let me know.

Have a great day,
Kerry

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!

- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------

[andydong1]

Hi, Kerry Zhou

It's worked when I used the image from NXP-MCUBootUtility-2.0.0 \ apps \ NXP_MIMXRT1050-EVKB_Rev.A \

But I used the .axf from MCUXpresso 's example ( I don't edit anything ) , it's not worked.

Just like the below picture

And I also try to use .s19 generated by MCUXpresso then it's worked.

I try both .s19 and tool's image with HAB signed image Boot 

The result is same as version 1.4.0

Best Regards,

Andy Dongag

[kerryzhou]

Hi Andy Dongag,

   Thank you for your updated information.

   Today, I have test it on my side, it works OK when I select the HAB signed image boot.

This is my test result log:

When you use the HAB signed image boot, you need to follow this post:

痞子衡嵌入式：开启NXP-MCUBootUtility工具的HAB签名功能 - CST（中英双语） - 痞子衡 - 博客园 

You need to modify hab4_pki_tree.bat in the folder: NXP-MCUBootUtility-2.0.0\tools\cst\keys

Do you modify it? And download the cst tool, and copy it to the MCUbootutility?

Please also note, you need to use the win10 system, do you also use the correct PC system?

Have a great day,
Kerry

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!

- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------

[andydong1]

Hi, Kerry Zhou

I found that my setting with hab4_pki_tree.bat got wrong.

Now, I can use HAB signed image boot 

Then, I followed the post to activate HAB Encrypted Boot

痞子衡嵌入式：开启NXP-MCUBootUtility工具的HAB加密功能 - CST（中英双语）

openssl version : openssl-1.0.2r

When I click "Connect to ROM" ,it got error.

Is there any suggestions ? Thanks!!

Best Regards,

Andy Dong

[kerryzhou]

Hi Andy Dong,

   Sorry for my later reply.

   I test the whole encryption function these days, really caused me a lot of time, because I also meet some problems.

   But, after I check your problem again, your problem still in the connection side.

   You can disconnect your board, then close the MCUBootUtility tool, open it again, power off you board, let it in the serial download mode, then try to connect it again. Please make sure your MCUBootUtility configure the correct external memory. You also can try the UART connection, your problem should still not related to the encryption.

   Please try the connection more times.

   I don't have the connection problems, and I also can download the HAB encrypted image boot code to the external flash, please note, the image should be non-xip, with XIP image, will have problems.

Best Regards,

Have a great day,
Kerry

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!

- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------

[kerryzhou]

Hi Andy Dong,

   Do you finished the

3.2 Compile openssl under MinGW

and

3.3 Generate cst.exe under MinGW

configuration?

Could you share all the MSYS2 MSYS and MSYS MinGW32-bit windows log?

I need to check it is correct.

Have a great day,
Kerry

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!

- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------

[andydong1]

Hi Kerry Zhou,

FYI

Best Regards,

Andy Dong

[kerryzhou]

Thank you Andy!

Please give me more time, I will double check it on my side.

Any updated information on my side, I will let you know ASAP.

Kerry