cancel
Showing results for 
Search instead for 
Did you mean: 

STM32MP157x: Secure Boot authentication failed

AZaki.2
Associate III

hello I have build tf-a and u-boot and signed them as specified in the st wiki documentation:

But I get the following error when booting up:

NOTICE:  CPU: STM32MP157FAC Rev.Z
NOTICE:  Model: STMicroelectronics STM32MP157F-DK2 Discovery Board
NOTICE:  Board: MB1272 Var4.0 Rev.C-02
NOTICE:  Bootrom authentication failed
NOTICE:  BL2: v2.6-stm32mp1-r1.0(release):v2.6-stm32mp-r1-3-gdbfd293df-dirty
NOTICE:  BL2: Built : 13:17:15, Aug  5 2022
NOTICE:  ROTPK is not deployed on platform. Skipping ROTPK verification.
NOTICE:  ROTPK is not deployed on platform. Skipping ROTPK verification.
NOTICE:  BL2: Booting BL32
NOTICE:  SP_MIN: v2.6-stm32mp1-r1.0(release):v2.6-stm32mp-r1-3-gdbfd293df-dirty
NOTICE:  SP_MIN: Built : 13:17:16, Aug  5 2022

Note: I didn't deploy the publicKeysHashes.bin on my board since I'm using test keys (I's one time operation non revesible)

Is it required publicKeysHashes deployemnt required ?

1 REPLY 1
AZaki.2
Associate III

I deployed hash keys to otp and don't get the error anymore.

STM32 MPUs Boot Rom are enforcing the hash verification even the Secure Boot is not enforced which is different from other vendors such as NXP and Xilinx....

Not really great !!