How to protect PSA Crypto keypair from being overwritten during OTA.

[dlewis]

Hi

I am working on a NCS v2.6.0 project that is using PSA Crypto to generate a keypair for each device. The keypair is being stored in persistent storage, but the issue I am having is that the keypair gets erased after the device is OTA'd. I tried making the partition in my board dts file read only, but this did not seem to change anything. The key remains after a simple board reset, but does not after OTA. Any help would be appreicated, thanks! I can provide files if necessary.

[Amanda Hsieh]

Hi, 

Are you using nRF Device Manager for updating? If so, I think you might have the issue may be due to a default setting in the nRF Connect mobile application. Please check out this post to unhook "Erase Application Settings". 

Regards,
Amanda H. 

[dlewis]

Hi Amanda,

I tested using the device manager app and disabled that option and it does not erase that data anymore. Thank you for your help!