`PM_PROVISION_ADDRESS` undeclared when using secure boot

RE: `PM_PROVISION_ADDRESS` undeclared when using secure boot

3Nigma — Tue, 25 Jun 2024 12:56:39 GMT

Found the actual reference to this behaviour in your link here:

Thank you very much, Einar.

We can close this ticket.

RE: `PM_PROVISION_ADDRESS` undeclared when using secure boot

Einar Thorsrud — Tue, 25 Jun 2024 12:45:30 GMT

Hi,

That is a good find. While not obvious, what you are seeing is intentional and documented here.

RE: `PM_PROVISION_ADDRESS` undeclared when using secure boot

3Nigma — Mon, 24 Jun 2024 14:54:31 GMT

Hey Einar,

So I've dug into this a little bit more and here is what I found:

You can reproduce it quite easily if you add CONFIG_SECURE_BOOT=y to prj.conf in the hello_world example AND define an empty b0 child_image board overlay config in child_image/b0/boards/<board_name>.conf .

I'm using the VS Code NRF extension and if you do this, you'll get the following 2 extra cmake arguments added : b0_CONF_FILE pointing to child_image/b0/boards/<board_name>.conf and a b0_OVERLAY_CONFIG pointing to nrf/subsys/partition_manager/partition_manager_enabled.conf . When you do this, samples/bootloader/prj.conf (which enables the CONFIG_SECURE_BOOT_STORAGE flag that adds the provision partition to the otp region by partion manager, defining PM_PROVISION_ADDRESS in the process ), doesn't get added.

If, on the other hand, you define a global child_image overlay for b0 in child_image/b0.conf , you only get a b0_OVERLAY_CONFIG pointing to child_image/b0.conf and the samples/bootloader/prj.conf gets processed as expected.

For me, it's a bit confusing that child_image/b0.conf is processed as an overlay while the child_image/b0/boards/<board>.conf does not and takes down samples/bootloader/prj.conf .

Is there any logical reason for this behaviour?

Thank you for following up,

Take care,

RE: `PM_PROVISION_ADDRESS` undeclared when using secure boot

Einar Thorsrud — Mon, 24 Jun 2024 12:21:35 GMT

Hi,

I am not able to find other similar issues. Can you share your project configuration and how you enabled secure boot (where did. you put CONFIG_SECURE_BOOT=y and what are your other configs, etc)?