[PATCH] imx: hab: Make imx_hab_is_enabled dependent on FIELD_RETURN
Marek Vasut
marex at denx.de
Fri Jun 21 16:17:56 CEST 2024
On 6/21/24 3:06 PM, Paul Geurts wrote:
> The decision on whether HAB is enabled is solely based on the SEC_CONFIG
> fuse. The HAB FIELD_RETURN feature is able to permanently disable HAB on
> a CPU, after which it is able to boot unsigned firmware. U-Boot however
> does not take into account the FIELD_RETURN mode, and refuses to boot
> unsigned software when the feature is enabled.
>
> Also take the FIELD_RETURN fuse into account when deciding whether HAB
> is enabled. When The FIELD_RETURN fuse is blown, HAB is not enabled.
>
> Tested on i.MX8M Mini, i.MX8M Plus, i.MX8M Nano and i.MX6ULL
The purpose of the field return fuse is to unlock a system when it is
returned to factory, right ?
Can the system be re-locked afterward too ?
More information about the U-Boot
mailing list