Unable to use TFM_PROFILE_LARGE with FIRMWARE_UPDATE config

RE: Unable to use TFM_PROFILE_LARGE with FIRMWARE_UPDATE config

runsiv — Wed, 21 Jun 2023 11:20:27 GMT

Unfortunately we don't support CONFIG_TFM_PARTITION_FIRMWARE_UPDATE yet. Our TF-M does not use the built in bootloader for TF-M but uses MCU boot and NSIB. You can check the example pfm_psa_template on how we do DFU with TF-M and this blogpost An Introduction to Trusted Firmware-M (TF-M) on "Immutable Bootloader and Second Stage Bootloader"

Regards

Runar

RE: Unable to use TFM_PROFILE_LARGE with FIRMWARE_UPDATE config

skirti — Fri, 16 Jun 2023 11:37:17 GMT

I want to identify the tfm_secure.hex size when I enable CONFIG_TFM_PROFILE_TYPE_LARGE with firmware update functionality.

To enable firmware updates, we need to enable config CONFIG_TFM_PARTITION_FIRMWARE_UPDATE which selects config CONFIG_TFM_MCUBOOT_DATA_SHARING which is dependent on CONFIG_TFM_BL2. So final prj.conf looks like below

CONFIG_BUILD_WITH_TFM=y

CONFIG_TFM_PROFILE_TYPE_LARGE=y

CONFIG_TFM_PARTITION_FIRMWARE_UPDATE=y

CONFIG_TFM_BL2=y

Sample program used: tfm_hello_world

With this configuration I get an error as stated above. ("BL2 not supported")

My question is what should I do to build CONFIG_TFM_PROFILE_TYPE_LARGE with firmware updates config on?

RE: Unable to use TFM_PROFILE_LARGE with FIRMWARE_UPDATE config

Didrik Rokhaug — Fri, 16 Jun 2023 11:28:01 GMT

Hi,

This is a bit outside my normal wheelhouse, so could you explain what your end goal here is?

I don't think we support the BL2, but you can still have two bootloader stages with our nRF Secure Immutable Bootloader and MCUBoot. To see how they can be used, you can look at the PSA template sample.

Best regards,

Didrik