cancel
Showing results for 
Search instead for 
Did you mean: 

SBSFU [SBOOT] System Security Check failed

DAzev.1
Associate

Device: STM32L4S5

Trying to run x-cube-aws v2.2.1

I've successfully flashed the B-L4S5I-IOT01_STSAFE_Provisioning binary (output below)

Start provisioning of STSAFE-A 
 
Force STSAFE-A provisioning
 
Launching STSAFE-A pairing
Check if Pairing Host keys available 
Pairing OK 
 
Erase Data : OK 
 
Now Store Certificate STM_POC_SBSFU_ROOT_TEST_CA_00 inside STSAFE-A 
Certificate STM_POC_SBSFU_ROOT_TEST_CA_00 successfully written inside STSAFE-A : OK
 
Now Store Certificate  STM_POC_SBSFU_OEM_TEST_CA_00 inside STSAFE-A 
Certificate STM_POC_SBSFU_OEM_TEST_CA_00 successfully written inside STSAFE-A : OK
 
Now reading and compare Certificates written inside STSAFE-A :
 
Get Certificate CERT_CA_FW OK 
Certificate CERT_CA_FW successfuly read and compared : OK
Get Certificate CERT_CA_OEM_FW OK 
Certificate CERT_CA_OEM_FW successfuly read and compared : OK 
 
End provisioning of STSAFE-A 

The next step, which was to flash SBSFU results in the following

= [SBOOT] System Security Check failed! Rebooting…
========= End of Execution ==========
 
 
 
= [SBOOT] System Security Check failed! Rebooting…
========= End of Execution ==========
 
 
 
= [SBOOT] System Security Check failed! Rebooting…
========= End of Execution ==========

How can I troubleshoot this?

1 REPLY 1
DAzev.1
Associate

Ok, I was able to progress by unchecking the DBANK user option configuration.

now I get this

= [SBOOT] System Security Check successfully passed. Starting…
 
 
======================================================================
=              (C) COPYRIGHT 2017 STMicroelectronics                 =
=                                                                    =
=              Secure Boot and Secure Firmware Update                =
======================================================================
 
 
= [SBOOT] STATE: WARNING: SECURE ENGINE INITIALIZATION WITH FACTORY DEFAULT VALUES!
= [SBOOT] STATE: CHECK STATUS ON RESET
	  INFO: A Reboot has been triggered by a Software reset!
	  INFO: Last execution detected error was: No error. Success.
= [SBOOT] STATE: CHECK NEW FIRMWARE TO DOWNLOAD
= [SBOOT] STATE: CHECK KMS BLOB TO INSTALL
= [SBOOT] STATE: CHECK USER FW STATUS
	  Slot SLOT_ACTIVE_1 not empty : erasing …
	  No valid FW found in the active slots nor new FW to be installed
	  Waiting for the local download to start… 
= [SBOOT] STATE: DOWNLOAD NEW USER FIRMWARE
	  File> Transfer> YMODEM> Send C.C.C

But when I download the aws_demo.bin file, I stop getting serial output... Again, stuck with no troubleshooting output.