First few basic facts. Grsecurity has nothing to do with the IMA, or wr-ima-appraise layer. It is different functionality, part of the wr-idp-devkit layer.
Different versions of the IDP XT have different default settings for the grsecurity. Either it can be enabled or disabled by default. For the version that I use, grsecurity is enabled by default, if not explicitly disabled during platform project configuration.
If grsecurity is enabled, starting of the device-manager fails. I needed to add
kernel.grsecurity.tpe=0
kernel.grsecurity.tpe_gid=0
kernel.grsecurity.tpe_restrict_all=0
into the /etc/sysctl.conf