From mboxrd@z Thu Jan  1 00:00:00 1970
From: Bryan O'Donoghue <bryan.odonoghue@linaro.org>
Date: Tue, 30 Jul 2019 14:32:35 +0100
Subject: [U-Boot] nxp: HABv4 secure boot on iMX7 NAND broken
In-Reply-To: <CAByghJZn8d91uFr5JXSR=jXcfU4engZP_=buOk7MNNjaVeigLA@mail.gmail.com>
References: <CAByghJZn8d91uFr5JXSR=jXcfU4engZP_=buOk7MNNjaVeigLA@mail.gmail.com>
Message-ID: <6a373006-65e5-191a-1ae7-d66bfaa66be5@linaro.org>
List-Id: <u-boot.lists.denx.de>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
To: u-boot@lists.denx.de



On 30/07/2019 12:00, Igor Opaniuk wrote:
> Hi folks,
> 
> Just curious if you ever faced any issues with HABv4 based
> secure boot on iMX7 SoC-based boards + NAND +
> mainline U-Boot (although it works perfectly when booting from
> eMMC).
> 
> I'm currently playing with it on Colibri iMX7 NAND version,
> following all steps from [1],
> (colibri_imx7_defconfig, where CONFIG_SECURE_BOOT=y
> and CONFIG_FSL_CAAM=y, without these two options enabled
> it's booting ok) and facing the same issue as explained
> in one of NXP forum threads [2]. Taking into account that default
> BootROM doesn't provide any output at all to the serial console it is like
> looking for a needle in a haystack.

When HAB authentication fails in the BootROM it should drop you back 
into serial download mode.

Does that happen ?