The customer can not use the Linux kernel 4.9.11 success boot with security boot function at the customer board and i.MX7D EVB.
Do you have tried the Linux kernel 4.9.11 security boot with i.MX7D EVB?
did you try other version successfully? first, you can refer to the document as below:
iMX7D Plugin mode HAB (High Assurance Boot)
Retrieving data ...