From mboxrd@z Thu Jan 1 00:00:00 1970 From: Bryan O'Donoghue Date: Tue, 30 Jul 2019 15:08:56 +0100 Subject: [U-Boot] nxp: HABv4 secure boot on iMX7 NAND broken In-Reply-To: References: <6a373006-65e5-191a-1ae7-d66bfaa66be5@linaro.org> Message-ID: <5c151f7d-f108-982f-b221-578a528c0c61@linaro.org> List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: u-boot@lists.denx.de On 30/07/2019 15:02, Bryan O'Donoghue wrote: > > > On 30/07/2019 14:56, Igor Opaniuk wrote: >>> Does that happen ? >> Yes, it does. > > And the board is closed ? Obviously yes it is. You have to sign the binary differently for serial download versus boot from eMMC - I guess this holds for NAND too. https://boundarydevices.com/high-assurance-boot-hab-dummies/ I have a serial download version of u-boot and an eMMC version for signed boards for that reason i.e. you can't use the same image. HAB for dummies explains it. --- bod