SPT Limitation: Unable to Add Multiple Executable Images for RT1189

[anand_s]

Hi,

I am working with the i.MX RT1189 EVK and have a two‑stage setup consisting of a Bootloader and an Application running on the CM7 core. Since the RT1189 BootROM executes on the CM33 core, I use a CM33 trigger application to start the CM7 core and launch the Bootloader. Using the Secure Provisioning Tool (SPT), I initially loaded only the CM33 trigger application as the main executable and added the Bootloader under the “Additional Image” tab. After signing the images, this setup worked as expected.

However, when I attempted to include the Application firmware as an additional executable, I found that the tool does not support multiple executable images. Treating the Application binary as “data” works, but my concern is that data entries don’t carry an executable signature, and we require secure, authenticated execution. Is there any method to add multiple executable images using SPT? Alternatively, if the Application is added as data, is it possible to attach a signature to it? I’m aware that merging images is an option, but this approach is not suitable for our current implementation.

SPT-TOOLKIT #iMXRT1189 #CM7

[Kan_Li]

Hi @anand_s ,

Which SPT version are you working with? Would you please specify?

Have a great day,
Kan

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!
- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------

[anand_s]

Hi Kan,

I am using SPT v25.12. I look forward to your reply, and thank you for your support.

[Kan_Li]

Hi @anand_s ,

Thanks for the info! For SPT , it would only sign the first image when multiple images are added, if you need to sign them all, maybe you have to merge them into a single image at first, with the help from the nxpimage tool, for example, nxpimage utils binary-image export. 

Have a great day,
Kan

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!
- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------