RT1170 OTFAD Troubleshooting

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

RT1170 OTFAD Troubleshooting

Jump to solution
994 Views
Stephan_
Contributor I

Hi,

I'm working on RT1176 on custom board and try to get HAB working with authenticated OTFAD. I'm using Secure Provisioning Tool (v7) and configuration itself looks quite simple, but I've still no success.

Systems configured to boot from fuses and all seems fine when using 'Unsigend' boot option. But when try OTFAD unsigned or authenticated the CPU won't start application and keeps booting into serial download. 

I've tried with several boards and also be aware of the clock issue (痞子衡嵌入式:系统时钟配置不当会导致i.MXRT1xxx系列下OTFAD加密启动失败 - 痞子衡 - 博客园 (cnblogs.com)).

Is there any way to get information what's gone wrong during boot? 

If helpful I can provide additional information about hardware, firmware, configuration. But as already stated configuration in SPT is quite simple. 

0 Kudos
Reply
1 Solution
799 Views
Omar_Anguiano
NXP TechSupport
NXP TechSupport

Thank you for your additional information. As the steps followed are correct for the generated image we need to double check that XIP encryption is enabled on the corresponding GPIO. To check this make sure that the switches are configured like the last row:

Omar_Anguiano_0-1706738166130.png

 

View solution in original post

0 Kudos
Reply
4 Replies
957 Views
Omar_Anguiano
NXP TechSupport
NXP TechSupport

Hello
I hope you are well.

What are the steps followed to test OTFAD? Which fuses were burned? Did you enable HAB?

Best regards,
Omar

0 Kudos
Reply
941 Views
Stephan_
Contributor I

Hi,

Im using MCUX to generate blinky example without changing root clock of M7:

Stephan__0-1702542348062.png

 

Afterwards using SPT to generate image and load to hardware. On our hardware NOR Flash is connected to SPI1 2nd pingroup, so we've to add some options in boot memory configuration:

HAB_4.png

OTFAD configuration in SPT is done using default values and self generated certificate:

HAB_2.png

HAB_6.png

In given screenshot I've tried with OTFAD unsigend and "HAB open", but already tried with authenticated and HAB closed on other hardware but with same results. 

HAB_1.png

OTP readout is here

HAB_3.png

 

I've also attached exported configuration as json file so you can see fuse settings. 

Image generation and flashing is done without errors but afterwards CPU keeps booting into serial loader. When I try same procedure but with boot set to "unsigned" blinky example starts, so I don't think it's an issue with image itself oder NOR flash configuration. 

According SRM it seems image loading fails:

Stephan__1-1702543038065.png

But when I've a lock on the QSPI communication it stops reading after 300us just after IVT, so there is no access to encrypted image. 

 

  

0 Kudos
Reply
800 Views
Omar_Anguiano
NXP TechSupport
NXP TechSupport

Thank you for your additional information. As the steps followed are correct for the generated image we need to double check that XIP encryption is enabled on the corresponding GPIO. To check this make sure that the switches are configured like the last row:

Omar_Anguiano_0-1706738166130.png

 

0 Kudos
Reply
656 Views
Stephan_
Contributor I

Hi,

thanks, you pointed the correct way, in the fuse configuration the ENCRYPT_XIP_EN (0x940[1]) fuse was not configured automatically by SPT.

0 Kudos
Reply