diff options
| author | Ye Li <ye.li@nxp.com> | 2021-07-28 06:37:33 -0700 |
|---|---|---|
| committer | Ye Li <ye.li@nxp.com> | 2022-04-06 18:04:51 +0800 |
| commit | 78ec72fd74e7b29a7dc1a01843d9fa971497eeea (patch) | |
| tree | 745e3843a8ba062643efd1d4fe9a111eb514100e /doc | |
| parent | 57b831805122a971e7f0cde320c84d49c1bfca7a (diff) | |
LFU-208 imx8ulp: Update ahab doc for 8ULP secure boot
Update the ahab doc to add 8ULP SRK hash generation and fuse burning.
Other steps are similar with 8QM/QXP SPL secure boot
Signed-off-by: Ye Li <ye.li@nxp.com>
Reviewed-by: Peng Fan <peng.fan@nxp.com>
(cherry picked from commit 13f356fc98779fd18339f53e7900a373335e34ea)
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/imx/ahab/guides/mx8_mx8x_spl_secure_boot.txt | 20 | ||||
| -rw-r--r-- | doc/imx/ahab/introduction_ahab.txt | 5 |
2 files changed, 25 insertions, 0 deletions
diff --git a/doc/imx/ahab/guides/mx8_mx8x_spl_secure_boot.txt b/doc/imx/ahab/guides/mx8_mx8x_spl_secure_boot.txt index 6699ebfecd..8de622aab1 100644 --- a/doc/imx/ahab/guides/mx8_mx8x_spl_secure_boot.txt +++ b/doc/imx/ahab/guides/mx8_mx8x_spl_secure_boot.txt @@ -199,6 +199,10 @@ as u-boot-atf-container.img. $ make SOC=<SoC Name> flash_spl + Or use below command for i.MX8ULP + + $ make SOC=<SoC Name> flash_singleboot_m33 + The mkimage log provides the container and signature block offsets used by the CSF description file: @@ -261,6 +265,11 @@ The U-Boot fuse tool can be used for programming eFuses on i.MX SoCs. 0000040 a27e5132 eba887cf 592c1e2b bb501799 0000060 ee702e07 cf8ce73e fb55e2d5 eba6bbd2 + On i.MX8ULP, the SRK Hash uses sha256 and dump 8 words fuses + $ od -t x4 SRK_1_2_3_4_fuse.bin + 0000000 db2959f2 90dfc39c 53394566 e0b75829 + 0000020 85e6f3b1 af00983d e5e804fe 7a451024 + - Program SRK_HASH[511:0] fuses: * On i.MX 8 QXP: @@ -301,6 +310,17 @@ The U-Boot fuse tool can be used for programming eFuses on i.MX SoCs. => fuse prog 0 736 0xfb55e2d5 => fuse prog 0 737 0xeba6bbd2 + * On i.MX 8 ULP: + + => fuse prog 15 0 0xdb2959f2 + => fuse prog 15 1 0x90dfc39c + => fuse prog 15 2 0x53394566 + => fuse prog 15 3 0xe0b75829 + => fuse prog 15 4 0x85e6f3b1 + => fuse prog 15 5 0xaf00983d + => fuse prog 15 6 0xe5e804fe + => fuse prog 15 7 0x7a451024 + 1.7 Verify SECO events ----------------------- diff --git a/doc/imx/ahab/introduction_ahab.txt b/doc/imx/ahab/introduction_ahab.txt index 6a4e4e4004..7ded26fde7 100644 --- a/doc/imx/ahab/introduction_ahab.txt +++ b/doc/imx/ahab/introduction_ahab.txt @@ -297,6 +297,11 @@ Table Hash. 46e34bf089780bd1c809e714a17e2f4e\ SRK_1_2_3_4_table.bin +- Platform like i.MX8ULP which only has 8 words of SRK fuses need to regenerate + the SRK_1_2_3_4_fuse.bin by SHA256 from SRK_1_2_3_4_table.bin. + + $ openssl dgst -binary -sha256 SRK_1_2_3_4_table.bin + NOTE: The commands above cannot be used as reference to program the SoC SRK_HASH fuses. |