CA to sign SRK public key HABv4

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

CA to sign SRK public key HABv4

Jump to solution
649 Views
antonio_santagi
Contributor IV

Hello, 

we are using iMx8MMini and we noticed there is the option of signing the SRK public keys certificates with a CA .

I read on other posts about this , like this one : 

https://community.nxp.com/t5/i-MX-Processors/Confused-about-SRK/m-p/1184334

But do you have an use case example on how this CA signing of the SRK certificates could be used ?

My guess is that it can be used for example to verify at production time that the hash being written to the fuses is authentic and can be trusted as it corresponds to signed SRK public keys that can verified against a CA certificate installed on the PC, is this correct ?

Or does it have other use cases ?

thank you

 

Labels (1)
0 Kudos
1 Solution
645 Views
Yuri
NXP Employee
NXP Employee

@antonio_santagi 
Hello,

  we do not have solutions / examples regarding CA signing of the SRK
certificates; how such approach could be used.

Regards,
Yuri.

View solution in original post

0 Kudos
1 Reply
646 Views
Yuri
NXP Employee
NXP Employee

@antonio_santagi 
Hello,

  we do not have solutions / examples regarding CA signing of the SRK
certificates; how such approach could be used.

Regards,
Yuri.

0 Kudos