I want to configure my setup for secure boot and enable TFM and encrypted application images for firmware update.
I am using nRF sdk version 2.5.0. My board is nRF9160. Now I want to build and update my application image version 2 either by west flash command or by serial terminal.
How can I update it by either west flash command or by serial terminal ?
following are my prj.conf added few CONFIGs in bootloader/mcuboot/boot/zephyr
### Modified configurations ####
CONFIG_SB_SIGNING_KEY_FILE="C:/ncs/v2.5.0/slte_sboot_ecdsa_p256k-priv.pem"
CONFIG_BOOT_SIGNATURE_TYPE_RSA=n
CONFIG_BOOT_SIGNATURE_TYPE_ECDSA_P256=y
CONFIG_BOOT_SERIAL_WAIT_FOR_DFU=y
### Use the minimal C library to reduce flash usage
CONFIG_MINIMAL_LIBC=y
I have added few modifications in my applications prj.conf as follows
# Debug configurations
CONFIG_SLM_LOG_LEVEL_DBG=y
CONFIG_LOG_PRINTK=n
CONFIG_LOG_MODE_IMMEDIATE=y
CONFIG_SECURE_BOOT=y
CONFIG_BUILD_WITH_TFM=y
CONFIG_SB_SIGNING_KEY_FILE="C:/ncs/v2.5.0/slte_sboot_ecdsa_p256k-priv.pem"
I am getting following bootloader log:
*** Booting nRF Connect SDK v2.5.0 ***
Attempting to boot slot 0.
Attempting to boot from address 0x8200.
Verifying signature against key 0.
Hash: 0x86...51
Firmware signature verified.
Firmware version 1
Setting monotonic counter (version: 1, slot: 0)
Booting (0x8200).
*** Booting nRF Connect SDK v2.5.0 ***
[00:00:00.255,859] <dbg> slm: main: RR: 0x00010001
[00:00:00.499,877] <inf> slm: lib_modem init: 0
[00:00:00.504,852] <inf> slm: Serial LTE Modem
