RE: [EXT] Re: [PATCH v17 0/7] firmware: imx: driver for NXP secure-enclave

Pankaj Gupta
2025-07-11T06:21:36Z

[-- Attachment #1: Type: text/plain, Size: 2629 bytes --]

> On Wed, Jul 09, 2025 at 10:23:45AM +0000, Pankaj Gupta wrote:
>>>>> Hi Shawn,
>>>>>
>>>>> To test it on MX93, you need additional patches on top of these.
>>>>>
>>>>> The plan was to send the next patch-set to enable the support for
>>>>> MX93, once these got merged.
>>>>>
>>>>> If you suggest, I can share the patche-set to enable MX93, as an
>>>>> attachment to you only.
>>
>>>> Yes, please. I would like to test the driver before it gets
>>>> merged,
>> thanks!
>>
>>> Please find attached the patches for enabling iMX93.
>>
>>> I have also sent v18 to dispose off the comments:
>>> 1. documentation,
>>> 2. updating the commit message with collected reviewed by tags.
>>
>> Are you able to test the driver on i.MX93?
>> Any help needed?

> I did not expect those additional patches (except i.MX93 DTS
> changes) for testing the series on i.MX93. So, no, I didn't test, sorry!

List of Patches:
0001: is required to call "init_fw" API, for SoC i.XM9x.
0002: i.MX93 do not have CAAM, ELE's RNG needs to be started, post init_fw.
0003: iMX93 do not have CAAM, hence (T)RNG & hwrng, need to enabled via ELE.
0004: enforce message sequence flow to prevent any message exchange out of
sequence. Required by power management API(s).
0005: additional API(s) required by Linux kernel management layers like
NVMEM & power management.
0006: EXPORTED API to be used by other kernel management layers.
0007 & 0008: are DTSI & DTS changes.

1. If you add DTSI & DTS changes, i.MX93 board will come up with driver
successfully probed.
Logs:
root@imx93evk:~# dmesg | grep fsl-se
[ 1.414748] fsl-se secure-enclave: assigned reserved memory node
memory@a4120000
[ 1.427195] fsl-se secure-enclave: i.MX secure-enclave: hsm0 interface to
firmware, configured.

root@imx93evk:~# ele_hsm_test --info

SAB Error: SAB CMD [0x10] Resp [0x1329] - Unknown error code

hsm_open_session failed err:0x13

2. If you want to use ELE test, you need to apply patches: 0001 & 0002.

Logs:
root@imx93evk:~# dmesg | grep fsl-se
[ 1.414748] fsl-se secure-enclave: assigned reserved memory node
memory@a4120000
[ 1.427195] fsl-se secure-enclave: i.MX secure-enclave: hsm0 interface to
firmware, configured.
root@imx93evk:~# ele_hsm_test --info
hsm_open_session PASS 0x376ace9e
-----------------------------------------------------------
Global Info:
-----------------------------------------------------------
i.MX93 A2
Open Lifecycle
Fips mode 0x0
LIB Version: 1.1.1
NVM Version: 1.1.1
Build ID: 4060004597fe1bf9e84ec0804b98d855f1ed0e13
-----------------------------------------------------------
hsm_close_session[0] ret:0x0

> Shawn

[-- Attachment #2: smime.p7s --]
[-- Type: application/pkcs7-signature, Size: 11094 bytes --]