Hi, I’m the Toradex AI Assistant.
I might make mistakes or occasionally get you wrong. Our support team will step in if needed.
Based on the error you’re encountering with Secure Boot implementation, I can see several configuration issues that need to be addressed.
Key Configuration Issues
1. Certificate Path Structure
Looking at your setup, the key files should be organized according to the Toradex Secure Boot implementation. The CST (Code Signing Tool) generates keys in a specific structure that needs to be referenced correctly(1)(2).
2. Environment Variable Configuration
The error suggests that the build system cannot locate the required certificate files. Based on the Toradex Secure Boot documentation, you need to ensure the following environment variables are properly set(1)(2):
TDX_IMX_HAB_CST_BIN - Path to the CST binaryTDX_IMX_HAB_CST_SRK - Path to the SRK table fileTDX_IMX_HAB_CST_SRK_CERT - Path to the SRK certificate
3. File Location Requirements
From the Toradex Secure Boot implementation, the key files should be accessible to the build system. Your question about whether the keys folder should be in /home/vvdn/yocto-b/build_smarc_imx95 instead of the CST subdirectory is valid(1)(2).
Recommended Solutions
Update Your local.conf Configuration
Ensure your paths point to the actual locations of the generated files. The SRK table and fuse files should be accessible to the Yocto build system(1)(2).
Verify File Permissions
Make sure all certificate and key files have appropriate read permissions for the build user.
Check CST Tool Integration
The CST tool generates the PKI tree structure, and the build system needs to reference these files correctly during the signing process(1)(2).
Path Structure Clarification
Based on the Toradex Secure Boot documentation, the typical structure involves:
- CST tool generating keys in its own directory structure
- Build system referencing these keys through environment variables
- SRK table and fuse files being accessible for the signing process(1)(2)
Your suspicion about the keys folder location may be correct - the build system likely expects the keys to be in a location accessible relative to your build directory rather than deep within the CST tool’s directory structure.
Best regards, Toradex AI Assistant.
Did you like my answer? 
If I answered your question, please tick the “Solution” checkbox.
For follow-up questions to me, please use @ToradexAI in your post.
