From: Stefano Babic <sbabic@denx.de>
To: Tim Harvey <tharvey@gateworks.com>,
Fabio Estevam <festevam@denx.de>,
sbabic@denx.de, u-boot@lists.denx.de, uboot-imx@nxp.com,
Peng Fan <peng.fan@nxp.com>, Heiko Schocher <hs@denx.de>
Subject: Re: IMX8M Mini HAB secure boot - working?
Date: Sat, 10 Jul 2021 11:14:21 +0200 [thread overview]
Message-ID: <6742d326-2daf-0480-cfb6-04e43a147b94@denx.de> (raw)
In-Reply-To: <CAJ+vNU0Kz2CcG5m9pynic0TyVtRb4iLVrPUzCOsczY+KPE47Aw@mail.gmail.com>
Hi Tim,
On 10.07.21 02:05, Tim Harvey wrote:
> Greetings,
>
> Has anyone successfully used secure boot with IMX8M Mini or other
> IMX8M? Peng's recent series got merged with the exception of what
> looks like the addition of couple of 'caam' commands to blob/deblob
> DEK's.
>
> There are no guides yet however I'm following the guides for the
> downstream NXP U-Boot and thus far have been able to get the SPL to
> boot with no HAB events but when it tries to authenticate the FIT
> image it validate_ivt fails with 'Error: Invalid IVT structure'.
Heiko tested this and found it, if I am not wrong he found the cause.
Added him in CC.
I have also planned to test this, it is on my TODO list...
> I'm
> not entirely clear if my CSF is wrong, or in the wrong place or if
> there is something missing.
>
Best regards,
Stefano
--
=====================================================================
DENX Software Engineering GmbH, Managing Director: Wolfgang Denk
HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany
Phone: +49-8142-66989-53 Fax: +49-8142-66989-80 Email: sbabic@denx.de
=====================================================================
next prev parent reply other threads:[~2021-07-10 9:14 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-07-10 0:05 IMX8M Mini HAB secure boot - working? Tim Harvey
2021-07-10 9:14 ` Stefano Babic [this message]
2021-07-10 12:24 ` Heiko Schocher
2021-07-12 16:06 ` Tim Harvey
2021-07-19 4:01 ` Heiko Schocher
2021-07-19 22:23 ` Tim Harvey
2021-07-20 4:01 ` Heiko Schocher
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=6742d326-2daf-0480-cfb6-04e43a147b94@denx.de \
--to=sbabic@denx.de \
--cc=festevam@denx.de \
--cc=hs@denx.de \
--cc=peng.fan@nxp.com \
--cc=tharvey@gateworks.com \
--cc=u-boot@lists.denx.de \
--cc=uboot-imx@nxp.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.