AnsweredAssumed Answered

Need help troubleshooting HAB events on  i.mx6

Question asked by Davis Roman on May 17, 2018
Latest reply on May 20, 2018 by Yuri Muhin

Hello,

 

We’re trying to enable high assurance boot on i.mx6solo.

 

We’re using u-boot 2017.03 however we’re getting HAB events.

 

I need to troubleshoot them however they’re very cryptic. Can you please help me diagnose this?

 

Thank you,

 

Davis

 

U-Boot 2017.03-high-assurance-boot+g1c9e603 (May 17 2018 - 13:47:52 -0400)

 

CPU:   Freescale i.MX6SOLO rev1.3 at 792 MHz

Reset cause: WDOG

Model: Keys

Board: ADT-HYBRID 200-01948A

DRAM:  256 MiB

MMC:   FSL_SDHC: 0, FSL_SDHC: 1

Using default environment

 

In:    serial

Out:   serial

Err:   serial

facmod value is 1!

Boot Device: EMMC

Net:   Board Net Initialization Failed

No ethernet found.

Normal Boot

Hit any key to stop autoboot:  0 

=> hab_status

 

Secure boot disabled

 

HAB Configuration: 0xf0, HAB State: 0x66

 

--------- HAB Event 1 -----------------

event data:

        0xdb 0x00 0x08 0x41 0x33 0x11 0xcf 0x00

 

STS = HAB_FAILURE (0x33)

RSN = HAB_INV_CSF (0x11)

CTX = HAB_CTX_CSF (0xCF)

ENG = HAB_ENG_ANY (0x00)

 

 

--------- HAB Event 2 -----------------

event data:

        0xdb 0x00 0x14 0x41 0x33 0x0c 0xa0 0x00

        0x00 0x00 0x00 0x00 0x17 0x7f 0xf4 0x00

        0x00 0x00 0x00 0x20

 

STS = HAB_FAILURE (0x33)

RSN = HAB_INV_ASSERTION (0x0C)

CTX = HAB_CTX_ASSERT (0xA0)

ENG = HAB_ENG_ANY (0x00)

 

 

--------- HAB Event 3 -----------------

event data:

        0xdb 0x00 0x14 0x41 0x33 0x0c 0xa0 0x00

        0x00 0x00 0x00 0x00 0x17 0x7f 0xf4 0x2c

        0x00 0x00 0x01 0xe0

 

STS = HAB_FAILURE (0x33)

RSN = HAB_INV_ASSERTION (0x0C)

CTX = HAB_CTX_ASSERT (0xA0)

ENG = HAB_ENG_ANY (0x00)

 

 

--------- HAB Event 4 -----------------

event data:

        0xdb 0x00 0x14 0x41 0x33 0x0c 0xa0 0x00

        0x00 0x00 0x00 0x00 0x17 0x7f 0xf4 0x20

        0x00 0x00 0x00 0x01

 

STS = HAB_FAILURE (0x33)

RSN = HAB_INV_ASSERTION (0x0C)

CTX = HAB_CTX_ASSERT (0xA0)

ENG = HAB_ENG_ANY (0x00)

 

 

--------- HAB Event 5 -----------------

event data:

        0xdb 0x00 0x14 0x41 0x33 0x0c 0xa0 0x00

        0x00 0x00 0x00 0x00 0x17 0x80 0x00 0x00

        0x00 0x00 0x00 0x04

 

STS = HAB_FAILURE (0x33)

RSN = HAB_INV_ASSERTION (0x0C)

CTX = HAB_CTX_ASSERT (0xA0)

ENG = HAB_ENG_ANY (0x00)

 

=>

 

 

Also, my command sequence file looks like the following:

 

[Header]

Version = 4.0

Hash Algorithm = sha256

Engine = CAAM

Engine Configuration = 0

Certificate Format = X509

Signature Format = CMS

[Install SRK]

File = "./cst-generated-data/crts/SRK_1_2_3_4_table.bin"

Source index = 0

[Install CSFK]

File = "./cst-generated-data/crts/CSF1_1_sha256_4096_65537_v3_usr_crt.pem"

[Authenticate CSF]

[Unlock]

Engine = CAAM

Features = RNG

[Install Key]

Verification index = 0

Target Index = 2

File= "./cst-generated-data/crts/IMG1_1_sha256_4096_65537_v3_usr_crt.pem"

[Authenticate Data]

Verification index = 2

Blocks = 0x177ff400 0x00000000 0x0006ec00 "u-boot.imx",\

         0x00910000 0x0000002c 0x000001e0 "u-boot.imx"

Outcomes