On Wed, Jun 8, 2022 at 8:09 AM Tommaso Merciai <[email protected]> wrote: > > Hi, > > On Wed, Jun 08, 2022 at 04:14:51PM +0200, Michael Nazzareno Trimarchi wrote: > > Hi > > > > On Wed, Jun 8, 2022 at 4:13 PM Fabio Estevam <[email protected]> wrote: > > > > > > Hi, > > > > > > On top of tree U-Boot, when CONFIG_IMX_HAB=y is selected in > > > imx8mm_evk_defconfig, the following error messages are seen: > > > > > > U-Boot SPL 2022.07-rc3-00097-g26aa5e5c3fbc-dirty (Jun 08 2022 - 10:59:56 > > > -0300) > > > SEC0: RNG instantiated > > > Normal Boot > > > WDT: Started watchdog@30280000 with servicing (60s timeout) > > > Trying to boot from MMC1 > > > hab fuse not enabled > > > > > > Authenticate image from DDR location 0x401fcdc0... > > > bad magic magic=0x0 length=0x00 version=0x0 > > > bad length magic=0x0 length=0x00 version=0x0 > > > bad version magic=0x0 length=0x00 version=0x0 > > > Error: Invalid IVT structure > > > > You need to have a sign image > > Agree > > Maybe this page can help you Fabio > https://boundarydevices.com/high-assurance-boot-hab-i-mx8m-edition/ >
Tommaso, Is that info still applicable to mainline U-Boot where binman is used to generate images? I'm not clear how the image signing is affected when using binman. I believe Heiko was talking about getting binman to sign images at one point but I'm not sure if anyone has worked on that. Best Regards, Tim
