Adding to BLE FOTA to peripheral_lbs with secure boot

RE: Adding to BLE FOTA to peripheral_lbs with secure boot

Menon — Mon, 25 Sep 2023 12:36:38 GMT

Hello,

[quote user="SirBuhi"]Thanks for your help, the enabled secure boot on the net core was indeed the issue in my project.[/quote]

No worries, and I am happy to help. I am glad to hear that your issue has been resolved.

[quote user="SirBuhi"]If it is fine for you, I will convert the ticket to public, as it might help someone later[/quote]

Sure, and thanks for doing this.

Kind Regards,

Abhijith

RE: Adding to BLE FOTA to peripheral_lbs with secure boot

SirBuhi — Sun, 24 Sep 2023 15:51:51 GMT

Dear Abhijith

Thanks for your help, the enabled secure boot on the net core was indeed the issue in my project. I had that settings, as I need secure booting for a consumer IoT device according to the ETSI 303 645 standard, but MCUBoot seems to have a problem with that.

If it is fine for you, I will convert the ticket to public, as it might help someone later.

Thank you,

Patrick

RE: Adding to BLE FOTA to peripheral_lbs with secure boot

Menon — Wed, 13 Sep 2023 11:55:30 GMT

Hello,

Let me clarify a few things here. For nRF5340, when you enable MCUboot (CONFIIG_MCUBOOT=y) for the appcore, the bootloader B0n will be assigned to the network core; you don't need to enable any configuration for this. But when you want to update your application and Appcore bootloader (MCUboot), then you need to consider adding the secure boot, which secure_boot=y(b0). I am not sure about your requirement, but updating MCUboot and Netcore at the same time is not supported yet.

AFAIK, for updating the MCUboot, you only need to enable secure_boot in the prj.confg of the application.

Kind Regards,

Abhijith

RE: Adding to BLE FOTA to peripheral_lbs with secure boot

SirBuhi — Tue, 12 Sep 2023 18:44:02 GMT

Dear Abhijith,

Secure Boot is on porpuse enabled in both config files, as it otherwise seems to me, that it will be only present on the APP core and not on the NET core as well. Or do you handle it differently?

I was able to build and flash the example you sent, thanks for that! I will check it further out in the next few days.

Kind Regards,

Patrick

RE: Adding to BLE FOTA to peripheral_lbs with secure boot

Menon — Mon, 11 Sep 2023 13:27:35 GMT

Hello,

Sorry for the long response time. I was sick for a few days last week, which delayed testing this.

I am attaching a basic sample for doing a FOTA update with secure boot enabled. You can try this. I tried building your sample here, but it's throwing an incomplete configuration error message. While checking the shared files, I saw secure_boot is enabled both inside the child/hci_rpmsg and inside the prj.config of your application. I am not able to reproduce the error you shared. I will go through the project once again and get back to you. In the meantime, can you try the sample I am attaching and please update me?

devzone.nordicsemi.com/.../8407.mcuboot_5F00_smp_5F00_ble.zip

Kind Regards,

Abhijith

RE: Adding to BLE FOTA to peripheral_lbs with secure boot

SirBuhi — Wed, 06 Sep 2023 19:59:48 GMT

Dear Abhijith

Thanks for your response.

I have attached the project (edit: removed it), as discribed before, the project is based on the lbs_peripheral and I then added the secure boot settings and now the mcumgr.

If preferred, I can try to further reduce it.

Kind regards,

Patrick

RE: Adding to BLE FOTA to peripheral_lbs with secure boot

Menon — Wed, 06 Sep 2023 19:47:52 GMT

Hello,

Yes, I can make the case private. Only you and Nordic engineers will be able to access it from here on. But it will be hard for me if it's a big project with a lot of configuration. I recommend you share a minimal project that I can test here to reproduce this.

Kind Regards,

Abhijith

RE: Adding to BLE FOTA to peripheral_lbs with secure boot

SirBuhi — Wed, 06 Sep 2023 12:52:19 GMT

Dear Abhijith,

Any possibility to send you the entire project in a private message?

Regards,

Patrick

RE: Adding to BLE FOTA to peripheral_lbs with secure boot

Menon — Tue, 05 Sep 2023 12:18:37 GMT

Hello,

I haven't tested this combination inside NCS V2.4.2. Are you implementing this on the peripeheral_lbs sample? If so, can you share your project? I will try to test and reproduce this here.

Kind Regards,

Abhijith