On Wed, Jun 8, 2022 at 8:09 AM Tommaso Merciai tommaso.merciai@amarulasolutions.com wrote:
Hi,
On Wed, Jun 08, 2022 at 04:14:51PM +0200, Michael Nazzareno Trimarchi wrote:
Hi
On Wed, Jun 8, 2022 at 4:13 PM Fabio Estevam festevam@gmail.com wrote:
Hi,
On top of tree U-Boot, when CONFIG_IMX_HAB=y is selected in imx8mm_evk_defconfig, the following error messages are seen:
U-Boot SPL 2022.07-rc3-00097-g26aa5e5c3fbc-dirty (Jun 08 2022 - 10:59:56 -0300) SEC0: RNG instantiated Normal Boot WDT: Started watchdog@30280000 with servicing (60s timeout) Trying to boot from MMC1 hab fuse not enabled
Authenticate image from DDR location 0x401fcdc0... bad magic magic=0x0 length=0x00 version=0x0 bad length magic=0x0 length=0x00 version=0x0 bad version magic=0x0 length=0x00 version=0x0 Error: Invalid IVT structure
You need to have a sign image
Agree
Maybe this page can help you Fabio https://boundarydevices.com/high-assurance-boot-hab-i-mx8m-edition/
Tommaso,
Is that info still applicable to mainline U-Boot where binman is used to generate images?
I'm not clear how the image signing is affected when using binman. I believe Heiko was talking about getting binman to sign images at one point but I'm not sure if anyone has worked on that.
Best Regards,
Tim