MCUBoot software based security count download protection not working

Question

MCUboot supports software security count based download protection. But it is found that it is not exposed by nRF SDK. It adds the "--security-counter" argument only if 
 
 CONFIG_MCUBOOT_HARDWARE_DOWNGRADE_PREVENTION is enabled.

Why this is not exposed ?

Kazi Afroza Sultana · Accepted Answer

Hello, 
 I have feedback from team. 
 you can sign your images manually using imgtool . we recommend building with "west -v build ..." and then see exactly which command is used to sign your image. Then you can use this as inspiration to sign the image manually.

Ligo George · Answer

Thanks for the update. 
 I am able to make it work with below config, instead of manually signing. 
 
 CONFIG_MCUBOOT_EXTRA_IMGTOOL_ARGS="--security-counter 1"

MCUBoot software based security count download protection not working

Top Replies