Gave this a go on iMX8QXP with Linux 5.17.5 and I can't quite get it working. I get -ENODEV from add_key() via keyctl. When I traced it in dmesg I couldn't get an as clear picture as I would like but CAAM (and thus possibly JRs?) initialzing after trusted_key. dmesg snips: [ 1.296772] trusted_key: Job Ring Device allocation for transform failed ... [ 1.799768] caam 31400000.crypto: device ID = 0x0a16040000000100 (Era 9) [ 1.807142] caam 31400000.crypto: job rings = 2, qi = 0 [ 1.822667] caam algorithms registered in /proc/crypto [ 1.830541] caam 31400000.crypto: caam pkc algorithms registered in /proc/crypto [ 1.841807] caam 31400000.crypto: registering rng-caam I didn't quite have the time to get a better trace than that. Best regards // John Ernberg