I have not installed the coolrunner, i just dumped the nand and used Easy Freeboot to get the CPU key. I'm not sure how it gets the CPU key, but it has got it right on all my 16MB nands so far. Anyways, I'm using a 64MB dump from a Jasper512, which when I use the dump and the CPU key from Easy Freebot, I get this....
CODE
done!
decrypting KeyVault at address 0x4000 of size 0x4000
keyvault decrypt failed, discarding
decrypting SMC at address 0x1000 of size 0x3000
SMC decrypted OK, will use if no external smc.bin is provided
seeking smc config in dump...found at offset 0x3be0000! Using if no smc config is provided.
Looks like the kv didn't decrypt correctly. Is this because the cpukey from Easy Freeboot is wrong or is the program bombing out. The only thing I can think of is that the CPU key is wrong. I've only used Easy Freeboot on 16mb nands that were already previous versions of freeboot, so maybe freeboot puts the cpukey somewhere in the nand that Easy Freeboot can find, which isn't there on a retail nand?
You need to install the coolrunner, boot to xell and use the cpu key from xell.