imx8: Add ahab_commit command
authorJohn Ripple <john.ripple@keysight.com>
Tue, 9 Sep 2025 19:53:22 +0000 (13:53 -0600)
committerFabio Estevam <festevam@gmail.com>
Sat, 20 Sep 2025 20:45:39 +0000 (17:45 -0300)
commitb717a4090fb0fda4814bbc9d9a91396710294cfb
tree00f4ffe72d324a2659a6ae44de3f1f337d57b31e
parent464800d91b036cfd2df26598d8df2ac72d4569dd
imx8: Add ahab_commit command

The ahab_commit command allows the user to commit into the SECO fuses
that control the SRK key revocation information. This is used to Revoke
compromised SRK keys.

To use ahab_commit, the boot container must be built with an SRK
revocation bit mask that is not 0x0. For the SPSDK provided by NXP, this
means setting the 'srk_revoke_mask' option in the config file used to
sign the boot container. The 'ahab_commit 0x10' can then be used to commit
the SRK revocation information into the SECO fuses.

Signed-off-by: John Ripple <john.ripple@keysight.com>
arch/arm/mach-imx/imx8/ahab.c
drivers/misc/imx8/scu_api.c
include/firmware/imx/sci/sci.h