iMX93 Industrial Secure Boot

This Wiki page provides a step-by-step guide to building and flashing a Yocto Project image with secure boot integration. These instructions apply to the iMX93 and iMX91 Industrial Modules.

Note: Please inspect all the recent changes at Voipac GitHub repository and start the custom build with the newest updates.

Preresiquities

• Download the CST tool from NXP website
• Unpack it into a machine where Yocto will be compiled such as:

/home/user/cst

• Navigate to the directory:

/home/user/cst/keys

• Create a text file called "serial", which contains 8 digits. It will be used for the certificate serial numbers:

echo 12345678 > serial

mkdir ~/voipac-debian cd ~/voipac-debian

Clone the iMX9x Industrial Debian Project into the host machine:

git clone https://github.com/voipac/debian-imx-voipac

Prerequisites

For Debian image building it is necessary to install docker installation as whole procedure is done in virtualised environment.

Building the image

Voipac provides quick and simple-to-use option how to build an image by using build_debian_voipac.sh prepared script:

This script automatically create Debian image for iMX93:

MACHINE=imx93-voipac ./build_debian_voipac.sh

During the u-boot build user will be asked for RAM Size. For basic kit configuration select option (1), for lite select 1G (option 2) and for pro and max configurations choose 2G option (option 3) as shown in below image.

Locating output files

After the build process was completed, the freshly built output files are located in the root directory:

ls -la image.sdimg

Prebuild images

Prebuild images can be downloaded at following link

Flashing the binaries

At this point everything was prepared to flash the binaries. Follow the flashing procedure instructions to start the development kit with the compiled images.

Login

When image is flashed and board is booted default credentials can be either root/root or voipac/voipac.