T113-S3: Secure Boot

[Lukas Schmid <lukas.schmid@netcube.li>]

[-- Attachment #1: Type: text/plain, Size: 1124 bytes --]

Hi all,

I’m working on enabling secure boot on the Allwinner T113-S3 (as part of 
preparing my SoM design for EU CRA compliance).

I’ve successfully fused the SoC with secure boot enabled and burned the 
ROTPK_HASH. The SoC correctly boots a TOC0-signed image from SD card, and U-
Boot starts up and behaves as expected.

However, when I try to load and boot the kernel from U-Boot, the board hangs 
right after U-Boot hands over control, no further progress. The same kernel 
image worked fine before enabling secure boot, so I suspect it might be related 
to the secure boot configuration or runtime expectations.

I’ve already tried debugging U-Boot and confirmed that the kernel is loaded and 
`bootm` is called; the system hangs at that point.

Here are the versions I’m using:
- **Kernel:** Linux 6.15.4 (mainline)
- **U-Boot:** 2025.07-rc5 (with custom devicetree and I2C3 modifications)

Is there anything specific I might be missing when running the kernel under 
secure boot on the T113-S3? Any guidance, common pitfalls, or pointers would 
be appreciated.

Best regards,  
Lukas

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 488 bytes --]