TMDS64EVM: Authentication Failure for appImage with SBL_OSPI

Hello,

The authentication of encrypted image is not supported as outlined here

https://software-dl.ti.com/mcu-plus-sdk/esd/AM64X/10_00_00_20/exports/docs/api_guide_am64x/SECURE_BOOT.html#autotoc_md192

If you are not using encryption & still seeing authentication failure, please share the boot logs.

Regards,

Prashant

Hello Prashant,

Secure Boot Limitation says encryption is not possible with SBL_OSPI, not decyption and authentication. 

*.appimage.hs_fs application is not running with SBL OSPI with authentication enabled.

Log message just says "Some Tests Failed."

Thank you.

Best Regards,
Upendar

Hello,

Upendar Sama said:

Secure Boot Limitation says encryption is not possible with SBL_OSPI, not decyption and authentication.

If encryption is not possible then it's the same for decryption. The authentication is supported with SBL_OSPI but only for the plain (non-encrypted) images.

Upendar Sama said:

Log message just says "Some Tests Failed."

Could you please help me with the following questions?

• SDK version you are using?
• Are you using TI EVM or a custom board?
• If custom board, what is the custom flash part you are using?
• Have you verified the error is due to authentication failure only?

Regards,

Prashant

Hello,

SDK version: Latest 10.x
Board: TMDS64EVM

Yes. It is because of authentication failure. You can easily reproduce it by using SBL OSPI and any application image(.appImage.hs_fs).

Regards,
Upendar

Hello,

Thank you for the details!!

I cannot test today due to limited availability of resources. Will try tomorrow & get back to you.

Hi, I have tested the SBL_OSPI from the SDK v10.x & it's working successfully. This aligns with the fact that the SDKs are well tested before they are released. You should not see failures at least with the TI EVMs.

Could you once share your images with which you are seeing the issue?

Also, do you see the issue randomly or every time on multiple PORs?

Hi Prashant,

Thank you for the response. 

This is bit confusing for me. I will test again and share the details.

Best Regards,
Upendar