[U-Boot] nxp: HABv4 secure boot on iMX7 NAND broken

Tue Jul 30 13:32:35 UTC 2019

On 30/07/2019 12:00, Igor Opaniuk wrote:
> Hi folks,
> 
> Just curious if you ever faced any issues with HABv4 based
> secure boot on iMX7 SoC-based boards + NAND +
> mainline U-Boot (although it works perfectly when booting from
> eMMC).
> 
> I'm currently playing with it on Colibri iMX7 NAND version,
> following all steps from [1],
> (colibri_imx7_defconfig, where CONFIG_SECURE_BOOT=y
> and CONFIG_FSL_CAAM=y, without these two options enabled
> it's booting ok) and facing the same issue as explained
> in one of NXP forum threads [2]. Taking into account that default
> BootROM doesn't provide any output at all to the serial console it is like
> looking for a needle in a haystack.

When HAB authentication fails in the BootROM it should drop you back 
into serial download mode.

Does that happen ?