I use HAB successfully authenticates the signed image .HAB didn't generate any events.I use fuse prog 1 3 0x2000000 this commond to close the devices.I can load u-boot images that have been signed.But when I load u-boot images that don't have been signed.The devices cann't power on . I can't get any message from the USB port and Serial port.They can't work.What should I do to save my devices.And what's the reason that my devices can't power on.
I have closed my device and secured my device ,hab_status shows that Secure boot enabled.I have downloaded a signed u-boot.imx ,but why I can download a no signed boot.img .It's not secure.I think a signed u-boot.imx can't load a no signed boot.img.Can you help me.Thank you!
Hi longlong
please check AN4581 Secure Boot on i.MX50, i.MX53, i.MX6 and i.MX7 Series using HABv4
https://www.nxp.com/docs/en/application-note/AN4581.pdf
Note, once burned, fuse can not be restored to original state.
Best regards
igor
Hi,
This is normal - once you have closed the device, the secure boot feature will not let anymore the execution passing to u-boot if the signature checking will fail. So, you'll be able to run only u-boot/images signed with the proper keys in sync with the SRK hashes.
Regards,
Marius