Firmware Update with secure boot secure firmware update

[hirenthumar]

Hi Support Team,

I am using the nRF7002DK board for our product POC (Proof of Concept) purposes. We plan to use the same MCU, the nRF5340, for our final product.

I have some questions regarding persistent data storage and secure boot/firmware:

1. I am exploring some methods for data storage as described in the documentation: Persistent storage of keys and data using the nRF Connect SDK.

   • We are selecting PSA Protected Storage for storing our configuration (keys, user config data, etc.). Is it necessary to enable the TF-M architecture for this purpose?

2. We intend to use secure boot and secure firmware update methods. If we enable TF-M, is it possible to place my entire application within the secure region along with ZephyrOS?

[Sigurd Hellesvik]

Hi,

We are selecting PSA Protected Storage for storing our configuration (keys, user config data, etc.). Is it necessary to enable the TF-M architecture for this purpose?

Yes.

We intend to use secure boot and secure firmware update methods. If we enable TF-M, is it possible to place my entire application within the secure region along with ZephyrOS?

No, that defeats the whole purpose of TF-M. The separation is what gives you security.
See An Introduction to Trusted Firmware-M (TF-M)

Regards,
Sigurd Hellesvik