AnsweredAssumed Answered

i.Mx8Mini HABV4 Errors

Question asked by Wendi Whitcomb on Feb 24, 2020
Latest reply on Feb 24, 2020 by Wendi Whitcomb

i.mx8 mini HABv4

I am trying to get HABv4 working on the HABv4 mini.  The system is running Android version 9 and is on the evaluation board.  I have followed the instructions using the User Guide : 

i.MX AndroidTM Security User's Guide

I have tried 2 scenarios signing the binaries with the aforementioned userguide (Section 3.1.2 Verifying Images with HABv4)

Scenario 1

Note secure boot is enabled in the appropriate defconfigs

u-boot-imx8mm.imx (signed)

u-boot-imx8mm-evk-uuu.imx (signed)

 

This results in Security Events of Invalid signature:

Secure boot disabled

HAB Configuration: 0xf0, HAB State: 0x66

--------- HAB Event 1 -----------------
event data:
0xdb 0x00 0x08 0x43 0x33 0x11 0xcf 0x00

STS = HAB_FAILURE (0x33)
RSN = HAB_INV_CSF (0x11)
CTX = HAB_CTX_CSF (0xCF)
ENG = HAB_ENG_ANY (0x00)

.... (Also events 2, 3, 4) -- not shown for brevity

Scenario 2:

Note secure boot is enabled in the appropriate defconfigs

1. u-boot-imx8mm-evk-uuu.imx (signed)

2. u-boot-imx8mm-trusty.imx (signed)

Does not boot at all 

My questions:

1.  Is scenario 1 possible without using Trusty OS? If so, what am I doing wrong?

2.  Do I require Trusty OS for Android? If so what am I doing wrong in Scenario 2?

My preference would be not to use Trusty OS and continue with Scenario 1.  Any help would be greatly appreciated.

Outcomes