IMX8MQ High Assurance Boot (HAB) failing with CAAM error

[tharveyy]

Hi all,

I'm not sure if this repository is still maintained, but i'm hoping someone here can provide me with some guidance.

I am currently trying to use High Assurance Boot (HAB) on my IMX8M device. And run into the following error once I have booted up the device:

U-Boot SPL 2021.04-00002-gf752480a4c-dirty (Nov 15 2024 - 16:47:52 +0000)
power_bd71837_init
set buck8 to 1.2v for DDR4
DDRINFO: start DRAM init
DDRINFO: DRAM rate 2400MTS
DDRINFO:ddrphy calibration done
DDRINFO: ddrmix config done
SEC0:  RNG instantiated
Normal Boot
Trying to boot from MMC1
hab fuse not enabled

Authenticate image from DDR location 0x401fcdc0...


U-Boot 2021.04-00002-gf752480a4c-dirty (Nov 15 2024 - 16:47:52 +0000)

CPU:   i.MX8MQ rev2.1 1500 MHz (running at 1000 MHz)
CPU:   Commercial temperature grade (0C to 95C) at 46C
Reset cause: POR
Model: Avnet Maaxboard
DRAM:  2 GiB
Error binding driver 'caam_jr': -96
Some drivers failed to bind
Error binding driver 'simple_bus': -96
Some drivers failed to bind
Error binding driver 'simple_bus': -96
Some drivers failed to bind
initcall sequence 00000000bffcd8d0 failed at call 000000004021c440 (err=-96)
### ERROR ### Please RESET the board ###

I have followed these steps:

https://github.com/Avnet/uboot-imx/blob/maaxboard_v2020.04_5.4.24_2.1.0/doc/imx/habv4/guides/mx8m_se...

I am using the default branch of uboot-imx:

https://github.com/Avnet/uboot-imx

I was hoping that it would just work out of the box, but in order to get it to build i also needed to add the following config option to the defconfig. (uboot-imx/configs/maaxboard_defconfig)

CONFIG_SPL_CRYPTO_SUPPORT=y;

I have since investigated this issue myself and found people with similar issues, but the fixes have not worked for me. Some fixes involve using yocto with the nxp's uboot-imx repository, however this project is very large and I am still not confident that it will have the necessary support for the maaxboard.

If any one has any suggestions or is able to look into this for a fix that would be greatly appreciated!

Kind regards,

Tom

[tharveyy]

It turns out i needed to use a specific set of branches for each of the components needed to build U-Boot to work with HAB. When using the default branches for each of the following repositories it resulted in the original error. There may be other combinations that work. Here are the following repos:

git clone --branch "maaxboard_lf-6.1.22-2.0.0" "https://github.com/Avnet/uboot-imx.git"

git clone --branch "maaxboard_lf-6.1.22-2.0.0" "https://github.com/Avnet/imx-mkimage"

git clone --branch "maaxboard_lf-6.1.22-2.0.0" "https://github.com/Avnet/imx-atf"

curl "https://sources.buildroot.net/firmware-imx/firmware-imx-8.22.bin" --output firmware-imx-8.22.bin

For me I have been following the IMX8m instructions as listed in my original post. The board I am using is the Maaxboard.