Hi,
I am using RT1166 EVK board. And I want to create signed binnary. I downloaded cst-3.3.1 and try to using bd file imx-flexspinor-normal-signed.bd which is under "SDK\middleware\mcu-boot\bin\Tools\bd_file\imxrt116x". But for the command "elftosb.exe -f imx -V -c bd_file\imxrt116x\flashloader-signed.bd -o bin\ivt_flashloader_secure.bin bin\flashloader_cm7.srec" will give error like below:
And in bd file:
So is there something wrong with this bd file or cst tool is not correct one?
Our products used RT1050 and we can find the flashloader tool under RT1050's tools & Software
So where to download RT1165's flashloader tool like RT1050's ?
Thanks,
Kyle
Hi @kyle81
If you want to use the signed, you still need to configure the cst tool.
chapter 2.1
In fact, I suggest you use our Secure provisional tool, which already support your RT1165:
The tool will be more easy to use.
Or you also can use the MCUBootUtility tool, it also support the Signed boot.
https://github.com/JayHeng/NXP-MCUBootUtility/archive/refs/tags/v3.4.0.zip
the related user manual is:
https://github.com/JayHeng/NXP-MCUBootUtility
Wish it helps you!
Best Regards,
Kerry
Thanks, I agree NXP Secure provisional tool will be more easy to use. But our legacy product of RT1050 is using old manual manner for creating sb file for MfgTool to use. So I am wondering if it is possible to use Secure provisional tool to create sb file manually. If so, it will have less impact on our manufacture line and keep the same behavior for RT1165 and RT1050.
And one more question, when I use Secure provisional tool and found the bd file for RT1165 is almost same with RT1050 and I have attached this file. Is it correct for section SEC_SET_ENGINE by using "DCP" and as I know RT1050 has "DCP" but RT1165 does't has DCP but CAAM? Please help to make me clear.
Best Regards,
Kyle
Hi @kyle81 ,
About the RT1165 secure boot, please also check this application note, it is really very good:
https://www.nxp.com/webapp/Download?colCode=AN13250&location=null
It also contains the BD file.
I also check the SDK for RT11XX the signed bd, still use the DCP.
So my understanding is, when the chip is RT11XX, the DCP input will be used as the CAAM, as RT11XX is no DCP.
About the SPT, it can mannually use the sb file.
Wish it helps you!
Best Regards,
Kerry
