On Mon, Sep 08, 2025 at 03:18:38PM -0600, John Ripple wrote: >The ahab_commit command allows the user to commit into the SECO fuses >that control the SRK key revocation information. This is used to Revoke >compromised SRK keys. > >To use ahab_commit, the boot container must be built with an SRK >revocation bit mask that is not 0x0. For the SPSDK provided by NXP, this >means setting the 'srk_revoke_mask' option in the config file used to >sign the boot container. The 'ahab_commit 0x10' can then be used to commit >the SRK revocation information into the SECO fuses. > >Signed-off-by: John Ripple <john.rip...@keysight.com>
Reviewed-by: Peng Fan <peng....@nxp.com>
