RT1170 OTFAD Troubleshooting

取消
显示结果 
显示  仅  | 搜索替代 
您的意思是: 
已解决

RT1170 OTFAD Troubleshooting

跳至解决方案
996 次查看
Stephan_
Contributor I

Hi,

I'm working on RT1176 on custom board and try to get HAB working with authenticated OTFAD. I'm using Secure Provisioning Tool (v7) and configuration itself looks quite simple, but I've still no success.

Systems configured to boot from fuses and all seems fine when using 'Unsigend' boot option. But when try OTFAD unsigned or authenticated the CPU won't start application and keeps booting into serial download. 

I've tried with several boards and also be aware of the clock issue (痞子衡嵌入式:系统时钟配置不当会导致i.MXRT1xxx系列下OTFAD加密启动失败 - 痞子衡 - 博客园 (cnblogs.com)).

Is there any way to get information what's gone wrong during boot? 

If helpful I can provide additional information about hardware, firmware, configuration. But as already stated configuration in SPT is quite simple. 

0 项奖励
回复
1 解答
801 次查看
Omar_Anguiano
NXP TechSupport
NXP TechSupport

Thank you for your additional information. As the steps followed are correct for the generated image we need to double check that XIP encryption is enabled on the corresponding GPIO. To check this make sure that the switches are configured like the last row:

Omar_Anguiano_0-1706738166130.png

 

在原帖中查看解决方案

0 项奖励
回复
4 回复数
959 次查看
Omar_Anguiano
NXP TechSupport
NXP TechSupport

Hello
I hope you are well.

What are the steps followed to test OTFAD? Which fuses were burned? Did you enable HAB?

Best regards,
Omar

0 项奖励
回复
943 次查看
Stephan_
Contributor I

Hi,

Im using MCUX to generate blinky example without changing root clock of M7:

Stephan__0-1702542348062.png

 

Afterwards using SPT to generate image and load to hardware. On our hardware NOR Flash is connected to SPI1 2nd pingroup, so we've to add some options in boot memory configuration:

HAB_4.png

OTFAD configuration in SPT is done using default values and self generated certificate:

HAB_2.png

HAB_6.png

In given screenshot I've tried with OTFAD unsigend and "HAB open", but already tried with authenticated and HAB closed on other hardware but with same results. 

HAB_1.png

OTP readout is here

HAB_3.png

 

I've also attached exported configuration as json file so you can see fuse settings. 

Image generation and flashing is done without errors but afterwards CPU keeps booting into serial loader. When I try same procedure but with boot set to "unsigned" blinky example starts, so I don't think it's an issue with image itself oder NOR flash configuration. 

According SRM it seems image loading fails:

Stephan__1-1702543038065.png

But when I've a lock on the QSPI communication it stops reading after 300us just after IVT, so there is no access to encrypted image. 

 

  

0 项奖励
回复
802 次查看
Omar_Anguiano
NXP TechSupport
NXP TechSupport

Thank you for your additional information. As the steps followed are correct for the generated image we need to double check that XIP encryption is enabled on the corresponding GPIO. To check this make sure that the switches are configured like the last row:

Omar_Anguiano_0-1706738166130.png

 

0 项奖励
回复
658 次查看
Stephan_
Contributor I

Hi,

thanks, you pointed the correct way, in the fuse configuration the ENCRYPT_XIP_EN (0x940[1]) fuse was not configured automatically by SPT.

0 项奖励
回复