HAB secure boot on the imx8mp processor

Greetings @solaire,

So if I understood correctly, you generated the signed binaries and flashed them to the device, but you haven’t set any fuses yet, correct? Not even the fuses related to your keys?

If that is the case then it would be expected to have HAB events since the validation process fails without the fuse keys being set. That said in theory setting those fuses should make the HAB events go away, assuming you got everything else correct. Just make sure to not set the final closing fuse until you are confident everything is correct.

By the way, did you take into account the issue described in this thread here: https://community.nxp.com/t5/i-MX-Processors/imx8mp-HAB/m-p/1546498#M197035

Otherwise you’ll run into a similar issue as well.

On a final note, we’re in the process of creating a Yocto meta-layer that will automate the HAB process via Yocto build. This layer can be found here: GitHub - toradex/meta-toradex-security

It’s still a work in progress but at least Verdin i.MX8M Plus has been tested. Perhaps this can be of assistance if you run into further issues.

Best Regards,