AnsweredAssumed Answered

RT1050 - why am I getting HAB_WARNING: HAB_UNS_ENGINE/HAB_CTX_COMMAND ?

Question asked by rshipman on Jan 22, 2020
Latest reply on Mar 2, 2020 by Victor Jimenez

I am getting HAB warnings on a signed XIP image on a RT1050-EVKB eval board.


I used MCUXpresso to create an iled_blinky demo for the RT1050-EVKB.
I set XIP_BOOT_HEADER_ENABLE=0
The rest of the properties/settings are the default.

 

I then used elftosb/sdphost/blhost to create and load the bootable image into flash on the RT1050-EVKB.
This board has the SRK fuses burnt.

 

The demo runs, but I get this HAB warning:


------------+----+------+----+-------------------------------------------------
Persistent | T | L | P | Contents
Memory | a | e | a |
Record | g | n | r |
Type | | g | |
| | t | |
| | h | |
------------+----+------+----+-------------------------------------------------
Event |0xdb|0x002c|0x43| SRCE Field: 69 0a c0 00
| | | | STS = HAB_WARNING (0x69)
| | | | RSN = HAB_UNS_ENGINE (0x0A)
| | | | CTX = HAB_CTX_COMMAND (0xC0)
| | | | ENG = HAB_ENG_ANY (0x00)
| | | | Cmd Field: 0xca002400
| | | | CMD: HAB_CMD_AUT_DAT (0xca)
| | | | LEN: 0x0024
| | | | FLG: 0x00
| | | | FLAGS: AUT_DAT_CLR (0x00)
| | | | KPEC Field: 0x02c51b00
| | | | KEY: 0x02
| | | | PCL: HAB_PCL_CMS (0xC5)
| | | | Sig. Start: 0x00000d54
| | | | Blk start/bytes:
| | | | 60 00 10 00 00 00 00 20 60 00 10 20 00 00 00 20
| | | | 60 00 20 00 00 00 32 10
------------+----+------+----+-------------------------------------------------

 

Here is the bd file I used to create the bootable image (which is basically the example from the Flashloader_i.MXRT1050_GA package):

 

options {
flags = 0x08;
startAddress = 0x60000000;
ivtOffset = 0x1000;
initialLoadSize = 0x2000;
//DCDFilePath = "dcd.bin";
# Note: This is required if the cst and elftsb are not in the same folder
// cstFolderPath = "/Users/nxf38031/Desktop/CSTFolder";
# Note: This is required if the default entrypoint is not the Reset_Handler
# Please set the entryPointAddress to Reset_Handler address
// entryPointAddress = 0x60002411;
}

sources {
elfFile = extern(0);
}

constants {
SEC_CSF_HEADER = 20;
SEC_CSF_INSTALL_SRK = 21;
SEC_CSF_INSTALL_CSFK = 22;
SEC_CSF_INSTALL_NOCAK = 23;
SEC_CSF_AUTHENTICATE_CSF = 24;
SEC_CSF_INSTALL_KEY = 25;
SEC_CSF_AUTHENTICATE_DATA = 26;
SEC_CSF_INSTALL_SECRET_KEY = 27;
SEC_CSF_DECRYPT_DATA = 28;
SEC_NOP = 29;
SEC_SET_MID = 30;
SEC_SET_ENGINE = 31;
SEC_INIT = 32;
SEC_UNLOCK = 33;
}

section (SEC_CSF_HEADER;
Header_Version="4.2",
Header_HashAlgorithm="sha256",
Header_Engine="DCP",
Header_EngineConfiguration=0,
Header_CertificateFormat="x509",
Header_SignatureFormat="CMS"
)
{
}

section (SEC_CSF_INSTALL_SRK;
InstallSRK_Table="crts/SRK_1_2_3_4_table.bin", // "valid file path"
InstallSRK_SourceIndex=0
)
{
}

section (SEC_CSF_INSTALL_CSFK;
InstallCSFK_File="crts/CSF1_1_sha256_2048_65537_v3_usr_crt.pem", // "valid file path"
InstallCSFK_CertificateFormat="x509" // "x509"
)
{
}

section (SEC_CSF_AUTHENTICATE_CSF)
{
}

section (SEC_CSF_INSTALL_KEY;
InstallKey_File="crts/IMG1_1_sha256_2048_65537_v3_usr_crt.pem",
InstallKey_VerificationIndex=0, // Accepts integer or string
InstallKey_TargetIndex=2) // Accepts integer or string
{
}

section (SEC_CSF_AUTHENTICATE_DATA;
AuthenticateData_VerificationIndex=2,
AuthenticateData_Engine="DCP",
AuthenticateData_EngineConfiguration=0)
{
}

 

Why am I getting this HAB warning please?

For the equivalent demo (signed xip) running on the RT1020-EVK (with the SRK fuses burnt to the same values), I get no HAB errors or warnings.
Both the RT1050 and RT1020 use an identical .bd file.

 

What is going on please?

 

Please find attached the iled_blinky demos and working directory.

Outcomes