Support for Key Management (Add/Revoke) via Auterm in MCUboot DFU process

[Yashaswini S]

Hello,

I am currently using custom keys for image signing and DFU through the MCUboot bootloader. I want to implement a feature to manage keys (like adding or revoking them) using the AuTerm application instead of hardcoding the key paths in the project files.

I'm using nRF5340dk board with the sdk version 2.9.0.

Could you please guide me on how to achieve this or if there is any recommended approach for dynamic key management through AuTerm?"

Thank you

[Vidar Berg]

Hello,

There is currently no mechanism  (or protocol support as far as I know) for adding or revoking keys. But only the public key will be embedded in the MCUBoot FW image. 

Best regards,

Vidar

[Yashaswini S]

Hi,

Can you provide the mechanism reference to add the Publickey in the Mcuboot.

Public key will be Embedded in the Mcuboot FW image using the Au-Term?

Thank you

[Vidar Berg]

Hi,

The Public key is included during the build process. For more information about the key management, please have a look at our DFU course here: https://academy.nordicsemi.com/courses/nrf-connect-sdk-intermediate/lessons/lesson-9-bootloaders-and-dfu-fota/topic/exercise-2-dfu-over-usb-adding-external-flash/ 

[Yashaswini S]

Hi,

I followed the same course to add the keys, By using Au-Term can we do this same instead of adding the key path into the code.

Can you give information about the Secure boot, for secure boot can we have to add configuration?

Thank you

[Vidar Berg]

Hi,

AuTerm does not support key provisioning.

Yashaswini S said:

same instead of adding the key path into the code.

Could you please explain the problem you're trying to solve? As indicated earlier, the private key will not be placed on the device.