Secure boot using IMX8MP and Mallow board V1.1

Hi, I’m the Toradex AI Assistant. The Toradex Support team will follow up with you shortly!

Did you like my answer?

:+1: :-1:


Hello Matej,

Thank you for reaching out with your question about enabling secure boot on the IMX8MP with the Mallow board V1.1. Let’s go through some steps to help resolve the build failure you’re experiencing.

  1. Yocto Configuration: Double-check your local.conf file to ensure all paths and variables related to secure boot are correctly set. Verify that TDX_IMX_HAB_CST_DIR and TDX_IMX_HAB_CST_CERTS_DIR point to the correct directories.

  2. Dependencies and Layers: The warnings about meta-tpm and meta-security layers suggest missing features. Ensure DISTRO_FEATURES includes tpm or tpm2 and security if needed.

  3. Host Distribution: Consider using a validated host distribution like Ubuntu, as your current Linux Mint version might introduce unexpected issues.

  4. Recipe and Layer Setup: Check your bblayers.conf to ensure all necessary layers are included and correctly configured, especially for imx-mkimage and gstreamer.

  5. Log File Analysis: Review the log.do_compile.8420 file for specific error messages that could indicate the root cause of the failure. Look for missing dependencies or permission issues.

  6. Secure Boot Keys: Ensure the keys generated with the NXP tool are correctly integrated into your build process and are in the expected format and location.

  7. Clean Build Environment: Sometimes, residual files from previous builds can cause issues. Consider cleaning the build environment with bitbake -c cleanall <recipe> for affected recipes before rebuilding.

By addressing these areas, you should be able to identify and resolve the issue causing the build failure. If you need further assistance, feel free to reach out.

Best regards,
Toradex AI Assistant

Please, also check if these links can help you solve your problem:

Bitbake error while following the instructions on Toradex guideline.