i.MX7 AXI ID and TZASC

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

i.MX7 AXI ID and TZASC

918 Views
vsiles
Senior Contributor I

Hi everyone,

a collegue of mine is working on a i.MX7 board to build an ethernet driver in our _secure_ os. Linux is running in the normal world. The driver is reserved to the secure world (using the CSU CSL registers), and without enabling the TZASC, everything works fine.

Now she is trying to enable the TZASC, so she has to configure the CSU SA register to enable DMA access from ENET to the secure memory. So far she failed: she got the fault interrupt of the TZASC with the following information:

Fail Address: address in secure memory where she expect DMA transaction to be performed

Fail Control: 0x200000 : Read access, NS access, unprivileged access

Fail id: 0x80c

We didn't find any documentation on the AXI ID of i.MX7 boards, so we can't understand this last value. If anyone can point us in the correct direction, that would be great !!

Also, in order to debug the problem, we switched all masters in CSU SA to secure, then switch them to Non secure one by one:

1) when all masters are secure, no interrupt is triggered, but the ethernet driver doesn't work

2) when the DAP part of CSU_SA is set to normal, the interrupt with id 0x80c is triggered

1) it seems obvious me missed something in the secure world configuration. Maybe something to do in the RDC. Any advices in order to configure secure DMA + TZASC on i.MX7 is welcome.

2) As far as I know, there is no reason for the DAP to perform DMA access when driving the ENET component. What could explain this situation ?

Best,

V.

Labels (1)
0 Kudos
2 Replies

639 Views
igorpadykov
NXP Employee
NXP Employee

Hi Vincent

unfortunately nxp official linux bsp do not support TrustZone configurations

and may be recommended to apply to NXP Professional Services for additional help

http://www.nxp.com/support/nxp-professional-services:PROFESSIONAL-SERVICE

Best regards
igor
-----------------------------------------------------------------------------------------------------------------------
Note: If this post answers your question, please click the Correct Answer button. Thank you!
-----------------------------------------------------------------------------------------------------------------------

0 Kudos

639 Views
vsiles
Senior Contributor I

Hi !

Slight update: with DAP master marked as secure in CSU SA and all the other ones as non-secure, it works (small trouble in her end), so it seems the documentation is not accurate and there is a mismatch in the masters of CSU SA. Could anyone confirm that ?

0 Kudos