Tool/software:
Hi,
We're trying to test out Secureboot on our own hardware and platform. I managed to do successful tests on the LP-AM243x.
I ran into an issue where the signed (hs-se) SBL boots up, however it fails to boot the application.
By debugging we found that it fails at the following part:
Sciclient_procBootGetProcessorState
retVal = Sciclient_service(&reqParam, &respParam); if((retVal != SystemP_SUCCESS) || ((respParam.flags & TISCI_MSG_FLAG_ACK) != TISCI_MSG_FLAG_ACK)) { retVal = SystemP_FAILURE; } return retVal;
the return value of Sciclient_service is SystemP_SUCCESS, however the flags are not valid.
Our best guess at the moment is the firewall configuration.
- Could you please provide an example or guide on how and with which parameters to configure the firewalls to enable image authentication?
As a side note, we also had to enable direct access on the OSPI, so that the bootloader can read the certificate from the flash directly.This was also not mentioned anywhere in the documentation.
Thanks,
Mark