I can't use mcuboot to boot a firmware on my external flash

RE: I can't use mcuboot to boot a firmware on my external flash

Vidar Berg — Mon, 19 May 2025 06:31:38 GMT

I'm glad to hear that it works now, thank you for the update! I was planning to configure a test here to see if I could reproduce the log output you got but I didn't get that far.

RE: I can't use mcuboot to boot a firmware on my external flash

d.ovetrigo — Mon, 19 May 2025 06:23:28 GMT

We could eventually solve the problem.

We needed to place the secondary in the external flash using the pm_static.yml and make sure that the size was the same as that of the primary.

The biggest problem though, was that the .bin file written on the flash was corrupt because of our custom board design. After fixing that and adding the VERSION file and making sure the secondary was on the external flash, the mcuboot could boot the secondary and trasnfer it to the primary correctly

RE: I can't use mcuboot to boot a firmware on my external flash

d.ovetrigo — Thu, 08 May 2025 13:50:33 GMT

I have tried building my version without any pm_static for the board and I got the following result in the partitions.yml file:

EMPTY_0:
  address: 0x1c000
  end_address: 0x20000
  placement:
    before:
    - s1_pad
  region: flash_primary
  size: 0x4000
EMPTY_1:
  address: 0x34000
  end_address: 0x38000
  placement:
    before:
    - mcuboot_pad
  region: flash_primary
  size: 0x4000
EMPTY_2:
  address: 0xfa000
  end_address: 0x100000
  placement:
    after:
    - settings_storage
  region: flash_primary
  size: 0x6000
app:
  address: 0x40000
  end_address: 0xf8000
  region: flash_primary
  size: 0xb8000
app_image:
  address: 0x38200
  end_address: 0xf8000
  orig_span: &id001
  - tfm
  - app
  region: flash_primary
  size: 0xbfe00
  span: *id001
b0:
  address: 0x0
  end_address: 0x8000
  placement:
    after:
    - start
  region: flash_primary
  size: 0x8000
b0_container:
  address: 0x0
  end_address: 0x8000
  orig_span: &id002
  - b0
  region: flash_primary
  size: 0x8000
  span: *id002
external_flash:
  address: 0xc0000
  end_address: 0x200000
  region: external_flash
  size: 0x140000
mcuboot:
  address: 0x8200
  end_address: 0x1c000
  placement:
    align:
      end: 0x1000
    before:
    - mcuboot_primary
  region: flash_primary
  sharers: 0x1
  size: 0x13e00
mcuboot_pad:
  address: 0x38000
  end_address: 0x38200
  placement:
    align:
      start: 0x8000
    before:
    - mcuboot_primary_app
  region: flash_primary
  sharers: 0x2
  size: 0x200
mcuboot_primary:
  address: 0x38000
  end_address: 0xf8000
  orig_span: &id003
  - app
  - tfm
  - mcuboot_pad
  region: flash_primary
  size: 0xc0000
  span: *id003
mcuboot_primary_app:
  address: 0x38200
  end_address: 0xf8000
  orig_span: &id004
  - app
  - tfm
  region: flash_primary
  size: 0xbfe00
  span: *id004
mcuboot_secondary:
  address: 0x0
  device: DT_CHOSEN(nordic_pm_ext_flash)
  end_address: 0xc0000
  placement:
    align:
      start: 0x4
  region: external_flash
  share_size:
  - mcuboot_primary
  size: 0xc0000
mcuboot_sram:
  address: 0x20000000
  end_address: 0x20008000
  orig_span: &id005
  - tfm_sram
  region: sram_primary
  size: 0x8000
  span: *id005
nonsecure_storage:
  address: 0xf8000
  end_address: 0xfa000
  orig_span: &id006
  - settings_storage
  region: flash_primary
  size: 0x2000
  span: *id006
nrf_modem_lib_ctrl:
  address: 0x20008000
  end_address: 0x200084e8
  inside:
  - sram_nonsecure
  placement:
    after:
    - tfm_sram
    - start
  region: sram_primary
  size: 0x4e8
nrf_modem_lib_rx:
  address: 0x2000a568
  end_address: 0x2000c568
  inside:
  - sram_nonsecure
  placement:
    after:
    - nrf_modem_lib_tx
  region: sram_primary
  size: 0x2000
nrf_modem_lib_sram:
  address: 0x20008000
  end_address: 0x2000c568
  orig_span: &id007
  - nrf_modem_lib_ctrl
  - nrf_modem_lib_tx
  - nrf_modem_lib_rx
  region: sram_primary
  size: 0x4568
  span: *id007
nrf_modem_lib_tx:
  address: 0x200084e8
  end_address: 0x2000a568
  inside:
  - sram_nonsecure
  placement:
    after:
    - nrf_modem_lib_ctrl
  region: sram_primary
  size: 0x2080
otp:
  address: 0xff8388
  end_address: 0xff83fc
  region: otp
  size: 0x74
provision:
  address: 0xff8108
  end_address: 0xff8388
  region: otp
  size: 0x280
s0:
  address: 0x8000
  end_address: 0x1c000
  orig_span: &id008
  - mcuboot
  - s0_pad
  region: flash_primary
  size: 0x14000
  span: *id008
s0_image:
  address: 0x8200
  end_address: 0x1c000
  orig_span: &id009
  - mcuboot
  region: flash_primary
  size: 0x13e00
  span: *id009
s0_pad:
  address: 0x8000
  end_address: 0x8200
  placement:
    after:
    - b0_container
    align:
      start: 0x8000
  region: flash_primary
  share_size:
  - mcuboot_pad
  size: 0x200
s1:
  address: 0x20000
  end_address: 0x34000
  orig_span: &id010
  - s1_pad
  - s1_image
  region: flash_primary
  size: 0x14000
  span: *id010
s1_image:
  address: 0x20200
  end_address: 0x34000
  placement:
    after:
    - s1_pad
    - s0
  region: flash_primary
  share_size:
  - mcuboot
  size: 0x13e00
s1_pad:
  address: 0x20000
  end_address: 0x20200
  placement:
    after:
    - s0
    align:
      start: 0x8000
  region: flash_primary
  share_size:
  - mcuboot_pad
  size: 0x200
settings_storage:
  address: 0xf8000
  end_address: 0xfa000
  inside:
  - nonsecure_storage
  placement:
    align:
      start: 0x8000
    before:
    - end
  region: flash_primary
  size: 0x2000
sram_nonsecure:
  address: 0x20008000
  end_address: 0x20040000
  orig_span: &id011
  - sram_primary
  - nrf_modem_lib_ctrl
  - nrf_modem_lib_tx
  - nrf_modem_lib_rx
  region: sram_primary
  size: 0x38000
  span: *id011
sram_primary:
  address: 0x2000c568
  end_address: 0x20040000
  region: sram_primary
  size: 0x33a98
sram_secure:
  address: 0x20000000
  end_address: 0x20008000
  orig_span: &id012
  - tfm_sram
  region: sram_primary
  size: 0x8000
  span: *id012
tfm:
  address: 0x38200
  end_address: 0x40000
  inside:
  - mcuboot_primary_app
  placement:
    before:
    - app
  region: flash_primary
  size: 0x7e00
tfm_nonsecure:
  address: 0x40000
  end_address: 0xf8000
  orig_span: &id013
  - app
  region: flash_primary
  size: 0xb8000
  span: *id013
tfm_secure:
  address: 0x38000
  end_address: 0x40000
  orig_span: &id014
  - mcuboot_pad
  - tfm
  region: flash_primary
  size: 0x8000
  span: *id014
tfm_sram:
  address: 0x20000000
  end_address: 0x20008000
  inside:
  - sram_secure
  placement:
    after:
    - start
  region: sram_primary
  size: 0x8000

But when trying to boot I did not get my mcuboot to boot the secondary.

I made the logging level higher to include debugging messages and this is what my log starts like:

*** Booting nRF Connect SDK v2.9.1-60d0d6c8d42d ***
*** Using Zephyr OS v3.7.99-ca954a6216c9 ***
Booting from slot 0.
s0_info is 0x8400
s1_info is 0x20400
s0_info version 1
s1_info version 1
Attempting to boot slot 0.
Attempting to boot from address 0x8200.
I: Trying to get Firmware version
I: Verifying signature against key 0.
I: Hash: 0x50...e3
I: Firmware signature verified.
Firmware version 1
I: Setting monotonic counter (version: 1, slot: 0)
About to boot the bl_boot
D: stack 0x20005318 for thread 0x20000298: obj_size=2048 buf_start=0x20005318 buf_size 2048 stack_ptr=0x20005b18
D: stack 0x200051d8 for thread 0x20000218: obj_size=320 buf_start=0x200051d8 buf_size 320 stack_ptr=0x20005318
D: lfclk: Clock started
D: tx_bufs 0x20005a18 - rx_bufs 0x20005a20 - 1
D: current_tx 0x20005a28 (2), current_rx 0x20005a28 (2), tx buf/len 0x20005a10/1, rx buf/len 0x20005a10/1
D: tx buf/len 0x20005a5f/1
D: rx buf/len 0x20005a5f/1
D: tx buf/len (nil)/0
D: rx buf/len (nil)/0
D: Transaction finished with status 0
D: tx_bufs 0x20005a30 - rx_bufs 0x20005a38 - 1
D: current_tx 0x20005a40 (2), current_rx 0x20005a40 (2), tx buf/len 0x20005a28/1, rx buf/len 0x20005a28/1
D: tx buf/len 0x20005a88/3
D: rx buf/len 0x20005a88/3
D: tx buf/len (nil)/0
D: rx buf/len (nil)/0
D: Transaction finished with status 0
D: tx_bufs 0x20005a30 - rx_bufs 0x20005a38 - 1
D: current_tx 0x20005a40 (2), current_rx 0x20005a40 (2), tx buf/len 0x20005a28/5, rx buf/len 0x20005a28/5
D: tx buf/len 0x20005a90/24
D: rx buf/len 0x20005a90/24
D: tx buf/len (nil)/0
D: rx buf/len (nil)/0
D: Transaction finished with status 0
I: w25q16@1: SFDP v 1.6 AP ff with 2 PH
I: PH0: ff00 rev 1.6: 16 DW @ 80
D: tx_bufs 0x200059f0 - rx_bufs 0x200059f8 - 1
D: current_tx 0x20005a00 (2), current_rx 0x20005a00 (2), tx buf/len 0x200059e8/5, rx buf/len 0x200059e8/5
D: tx buf/len 0x20005a38/64
D: rx buf/len 0x20005a38/64
D: tx buf/len (nil)/0
D: rx buf/len (nil)/0
D: Transaction finished with status 0
I: w25q16@1: 2 MiBy flash
D: Erase 4096 with 20
D: Erase 32768 with 52
D: Erase 65536 with d8
D: Page size 256 bytes
I: PH1: ff84 rev 1.0: 2 DW @ d0
D: layout 512 x 4096 By pages
*** Booting My Application v2.1.0-dev-12e5ee106034 ***
*** Using nRF Connect SDK v2.9.1-60d0d6c8d42d ***
*** Using Zephyr OS v3.7.99-ca954a6216c9 ***
D: scheduler unlocked (0x20000298:0)
I: Starting bootloader
D: Checking for bootable image
D: thread 0x20000298 for 328 ticks
D: boot_go() bootutil
D: tx_bufs 0x200059b8 - rx_bufs 0x200059c0 - 1
D: current_tx 0x200059c8 (2), current_rx 0x200059c8 (2), tx buf/len 0x200059b0/4, rx buf/len 0x200059b0/4
D: tx buf/len 0x200027e8/32
D: rx buf/len 0x200027e8/32
D: tx buf/len (nil)/0
D: rx buf/len (nil)/0
D: Transaction finished with status 0
D: using boot swap type multi
D: tx_bufs 0x20005970 - rx_bufs 0x20005978 - 1
D: current_tx 0x20005980 (2), current_rx 0x20005980 (2), tx buf/len 0x20005968/4, rx buf/len 0x20005968/4
D: tx buf/len 0x200059d0/16
D: rx buf/len 0x200059d0/16
D: tx buf/len (nil)/0
D: rx buf/len (nil)/0
D: Transaction finished with status 0
D: tx_bufs 0x20005970 - rx_bufs 0x20005978 - 1
D: current_tx 0x20005980 (2), current_rx 0x20005980 (2), tx buf/len 0x20005968/4, rx buf/len 0x20005968/4
D: tx buf/len 0x200059cf/1
D: rx buf/len 0x200059cf/1
D: tx buf/len (nil)/0
D: rx buf/len (nil)/0
D: Transaction finished with status 0
D: tx_bufs 0x20005960 - rx_bufs 0x20005968 - 1
D: current_tx 0x20005970 (2), current_rx 0x20005970 (2), tx buf/len 0x20005958/4, rx buf/len 0x20005958/4
D: tx buf/len 0x20005a1a/1
D: rx buf/len 0x20005a1a/1
D: tx buf/len (nil)/0
D: rx buf/len (nil)/0
D: Transaction finished with status 0
D: tx_bufs 0x20005960 - rx_bufs 0x20005968 - 1
D: current_tx 0x20005970 (2), current_rx 0x20005970 (2), tx buf/len 0x20005958/4, rx buf/len 0x20005958/4
D: tx buf/len 0x20005a1b/1
D: rx buf/len 0x20005a1b/1
D: tx buf/len (nil)/0
D: rx buf/len (nil)/0
D: Transaction finished with status 0
D: 0: magic_primary_slot=0x4, magic_secondary_slot=0x1, image_ok_primary_slot=0x4, image_ok_secondary_slot=0x3, copy_done_primary_slot=0x4
D: 1: magic_primary_slot=0x4, magic_secondary_slot=0x1, image_ok_primary_slot=0x4, image_ok_secondary_slot=0x1, copy_done_primary_slot=0x4
D: 2: magic_primary_slot=0x1, magic_secondary_slot=0x3, image_ok_primary_slot=0x3, image_ok_secondary_slot=0x4, copy_done_primary_slot=0x1
I: Image index: 0, Swap type: none
D: tx_bufs 0x200059b8 - rx_bufs 0x200059c0 - 1
D: current_tx 0x200059c8 (2), current_rx 0x200059c8 (2), tx buf/len 0x200059b0/4, rx buf/len 0x200059b0/4
D: tx buf/len 0x20002840/32
D: rx buf/len 0x20002840/32
D: tx buf/len (nil)/0
D: rx buf/len (nil)/0
D: Transaction finished with status 0
D: using boot swap type multi
D: tx_bufs 0x20005970 - rx_bufs 0x20005978 - 1
D: current_tx 0x20005980 (2), current_rx 0x20005980 (2), tx buf/len 0x20005968/4, rx buf/len 0x20005968/4
D: tx buf/len 0x200059d0/16
D: rx buf/len 0x200059d0/16
D: tx buf/len (nil)/0
D: rx buf/len (nil)/0
D: Transaction finished with status 0
D: tx_bufs 0x20005970 - rx_bufs 0x20005978 - 1
D: current_tx 0x20005980 (2), current_rx 0x20005980 (2), tx buf/len 0x20005968/4, rx buf/len 0x20005968/4
D: tx buf/len 0x200059cf/1
D: rx buf/len 0x200059cf/1
D: tx buf/len (nil)/0
D: rx buf/len (nil)/0
D: Transaction finished with status 0
D: tx_bufs 0x20005960 - rx_bufs 0x20005968 - 1
D: current_tx 0x20005970 (2), current_rx 0x20005970 (2), tx buf/len 0x20005958/4, rx buf/len 0x20005958/4
D: tx buf/len 0x20005a1a/1
D: rx buf/len 0x20005a1a/1
D: tx buf/len (nil)/0
D: rx buf/len (nil)/0
D: Transaction finished with status 0
D: tx_bufs 0x20005960 - rx_bufs 0x20005968 - 1
D: current_tx 0x20005970 (2), current_rx 0x20005970 (2), tx buf/len 0x20005958/4, rx buf/len 0x20005958/4
D: tx buf/len 0x20005a1b/1
D: rx buf/len 0x20005a1b/1
D: tx buf/len (nil)/0
D: rx buf/len (nil)/0
D: Transaction finished with status 0
D: 0: magic_primary_slot=0x4, magic_secondary_slot=0x1, image_ok_primary_slot=0x4, image_ok_secondary_slot=0x3, copy_done_primary_slot=0x4
D: 1: magic_primary_slot=0x4, magic_secondary_slot=0x1, image_ok_primary_slot=0x4, image_ok_secondary_slot=0x1, copy_done_primary_slot=0x4
D: 2: magic_primary_slot=0x1, magic_secondary_slot=0x3, image_ok_primary_slot=0x3, image_ok_secondary_slot=0x4, copy_done_primary_slot=0x1
I: Image index: 1, Swap type: none
D: boot_go() returned 0
I: Bootloader chainload address offset: 0x38000
All pins have been configured as non-secure
Booting TF-M v2.1.0
[Sec Thread] Secure image initializing!
TF-M Float ABI: Hard
Lazy stacking enabled

I also added a couple of messages like D: boot_go() returned 0 where I return

BOOT_LOG_DBG("boot_go() returned %d", rsp.br_flash_dev_id);

after the command

FIH_CALL(boot_go, fih_rc, &rsp);

in the main.c from mcuboot is done.

There are also a couple of things that I am not very sure about whether I am doing correctly or not.

I am not calling any function calling for a boot. I am just letting the mcuboot boot the secondary because it has a higher version number than the primary.

I am reading further about how to use the mcuboot and I am not very sure about whether I have to decide on a swap method and how do I pick them. They are not configs, but documented as defined macros. Does the mcuboot pick them itself because of other selected configs?

Thank you for your help!

RE: I can't use mcuboot to boot a firmware on my external flash

Vidar Berg — Wed, 30 Apr 2025 18:31:54 GMT

The Secondary slot is set larger than the primary slot, and they are meant to have the same size. This could explain why the slots are not read. Though I would have expected a warning about this in the debug log. Maybe you need to increase the log level.

[quote user="d.ovetrigo"]EDIT: I am also showing what I have set as a pm_static.yaml:[/quote]

If you remove this and do a pristine build to allow the partition manager to size the partition, then try again, does it work?

RE: I can't use mcuboot to boot a firmware on my external flash

d.ovetrigo — Wed, 30 Apr 2025 16:20:59 GMT

Hi Vidar,

That could be an issue, I will debug that further.

As for my generated partitions yml file, it is as follows:

EMPTY_0:
  address: 0x1c000
  end_address: 0x20000
  placement:
    before:
    - s1_pad
  region: flash_primary
  size: 0x4000
EMPTY_1:
  address: 0x34000
  end_address: 0x38000
  placement:
    before:
    - mcuboot_pad
  region: flash_primary
  size: 0x4000
EMPTY_2:
  address: 0xfa000
  end_address: 0x100000
  placement:
    after:
    - settings_storage
  region: flash_primary
  size: 0x6000
app:
  address: 0x40000
  end_address: 0xf8000
  region: flash_primary
  size: 0xb8000
app_image:
  address: 0x38200
  end_address: 0xf8000
  orig_span: &id001
  - tfm
  - app
  region: flash_primary
  size: 0xbfe00
  span: *id001
b0:
  address: 0x0
  end_address: 0x8000
  placement:
    after:
    - start
  region: flash_primary
  size: 0x8000
b0_container:
  address: 0x0
  end_address: 0x8000
  orig_span: &id002
  - b0
  region: flash_primary
  size: 0x8000
  span: *id002
external_flash:
  address: 0xe0000
  end_address: 0x200000
  region: external_flash
  size: 0x120000
mcuboot:
  address: 0x8200
  end_address: 0x1c000
  placement:
    align:
      end: 0x1000
    before:
    - mcuboot_primary
  region: flash_primary
  sharers: 0x1
  size: 0x13e00
mcuboot_pad:
  address: 0x38000
  end_address: 0x38200
  placement:
    align:
      start: 0x8000
    before:
    - mcuboot_primary_app
  region: flash_primary
  sharers: 0x2
  size: 0x200
mcuboot_primary:
  address: 0x38000
  end_address: 0xf8000
  orig_span: &id003
  - app
  - mcuboot_pad
  - tfm
  region: flash_primary
  size: 0xc0000
  span: *id003
mcuboot_primary_app:
  address: 0x38200
  end_address: 0xf8000
  orig_span: &id004
  - app
  - tfm
  region: flash_primary
  size: 0xbfe00
  span: *id004
mcuboot_secondary:
  address: 0x0
  end_address: 0xe0000
  region: external_flash
  size: 0xe0000
mcuboot_sram:
  address: 0x20000000
  end_address: 0x20008000
  orig_span: &id005
  - tfm_sram
  region: sram_primary
  size: 0x8000
  span: *id005
nonsecure_storage:
  address: 0xf8000
  end_address: 0xfa000
  orig_span: &id006
  - settings_storage
  region: flash_primary
  size: 0x2000
  span: *id006
nrf_modem_lib_ctrl:
  address: 0x20008000
  end_address: 0x200084e8
  inside:
  - sram_nonsecure
  placement:
    after:
    - tfm_sram
    - start
  region: sram_primary
  size: 0x4e8
nrf_modem_lib_rx:
  address: 0x2000a568
  end_address: 0x2000c568
  inside:
  - sram_nonsecure
  placement:
    after:
    - nrf_modem_lib_tx
  region: sram_primary
  size: 0x2000
nrf_modem_lib_sram:
  address: 0x20008000
  end_address: 0x2000c568
  orig_span: &id007
  - nrf_modem_lib_ctrl
  - nrf_modem_lib_tx
  - nrf_modem_lib_rx
  region: sram_primary
  size: 0x4568
  span: *id007
nrf_modem_lib_tx:
  address: 0x200084e8
  end_address: 0x2000a568
  inside:
  - sram_nonsecure
  placement:
    after:
    - nrf_modem_lib_ctrl
  region: sram_primary
  size: 0x2080
otp:
  address: 0xff8388
  end_address: 0xff83fc
  region: otp
  size: 0x74
provision:
  address: 0xff8108
  end_address: 0xff8388
  region: otp
  size: 0x280
s0:
  address: 0x8000
  end_address: 0x1c000
  orig_span: &id008
  - s0_pad
  - mcuboot
  region: flash_primary
  size: 0x14000
  span: *id008
s0_image:
  address: 0x8200
  end_address: 0x1c000
  orig_span: &id009
  - mcuboot
  region: flash_primary
  size: 0x13e00
  span: *id009
s0_pad:
  address: 0x8000
  end_address: 0x8200
  placement:
    after:
    - b0_container
    align:
      start: 0x8000
  region: flash_primary
  share_size:
  - mcuboot_pad
  size: 0x200
s1:
  address: 0x20000
  end_address: 0x34000
  orig_span: &id010
  - s1_pad
  - s1_image
  region: flash_primary
  size: 0x14000
  span: *id010
s1_image:
  address: 0x20200
  end_address: 0x34000
  placement:
    after:
    - s1_pad
    - s0
  region: flash_primary
  share_size:
  - mcuboot
  size: 0x13e00
s1_pad:
  address: 0x20000
  end_address: 0x20200
  placement:
    after:
    - s0
    align:
      start: 0x8000
  region: flash_primary
  share_size:
  - mcuboot_pad
  size: 0x200
settings_storage:
  address: 0xf8000
  end_address: 0xfa000
  inside:
  - nonsecure_storage
  placement:
    align:
      start: 0x8000
    before:
    - end
  region: flash_primary
  size: 0x2000
sram_nonsecure:
  address: 0x20008000
  end_address: 0x20040000
  orig_span: &id011
  - sram_primary
  - nrf_modem_lib_ctrl
  - nrf_modem_lib_tx
  - nrf_modem_lib_rx
  region: sram_primary
  size: 0x38000
  span: *id011
sram_primary:
  address: 0x2000c568
  end_address: 0x20040000
  region: sram_primary
  size: 0x33a98
sram_secure:
  address: 0x20000000
  end_address: 0x20008000
  orig_span: &id012
  - tfm_sram
  region: sram_primary
  size: 0x8000
  span: *id012
tfm:
  address: 0x38200
  end_address: 0x40000
  inside:
  - mcuboot_primary_app
  placement:
    before:
    - app
  region: flash_primary
  size: 0x7e00
tfm_nonsecure:
  address: 0x40000
  end_address: 0xf8000
  orig_span: &id013
  - app
  region: flash_primary
  size: 0xb8000
  span: *id013
tfm_secure:
  address: 0x38000
  end_address: 0x40000
  orig_span: &id014
  - mcuboot_pad
  - tfm
  region: flash_primary
  size: 0x8000
  span: *id014
tfm_sram:
  address: 0x20000000
  end_address: 0x20008000
  inside:
  - sram_secure
  placement:
    after:
    - start
  region: sram_primary
  size: 0x8000

RE: I can't use mcuboot to boot a firmware on my external flash

Vidar Berg — Wed, 30 Apr 2025 15:38:27 GMT

Hi Daniel,

Thanks for the additional info. It looks like the check here: https://github.com/nrfconnect/sdk-mcuboot/blob/9d9d524407df6da0815c79c5b9cf645f1ce25592/boot/bootutil/src/bootutil_public.c#L456 is failing in the bootloader, but it is not clear why from the configuration you posted. Can you please post the generated partitions.yml file from your build folder as well?

Best regards,

Vidar

RE: I can't use mcuboot to boot a firmware on my external flash

d.ovetrigo — Wed, 30 Apr 2025 11:50:28 GMT

Hi Vidar,

Thank you for your quick response. I am testing with a custom board which has an NRF9161 connected through SPI to a flash memory.

I just applied your suggestion with CONFIG_MCUBOOT_EXTRA_IMGTOOL_ARGS="--confirm" to the prj.conf file of my application (not to the mcuboot/prj.conf), but it still has not worked yet.

The output I get when I program the nrf9161 is as follows:

*** Booting nRF Connect SDK v2.9.1-60d0d6c8d42d ***
*** Using Zephyr OS v3.7.99-ca954a6216c9 ***
Attempting to boot slot 0.
Attempting to boot from address 0x8200.
I: Trying to get Firmware version
I: Verifying signature against key 0.
I: Hash: 0x7c...a0
I: Firmware signature verified.
Firmware version 1
I: Setting monotonic counter (version: 1, slot: 0)
I: w25q16@1: SFDP v 1.6 AP ff with 2 PH
I: PH0: ff00 rev 1.6: 16 DW @ 80
I: w25q16@1: 2 MiBy flash
I: PH1: ff84 rev 1.0: 2 DW @ d0
*** Booting My Application v2.1.0-dev-12e5ee106034 ***
*** Using nRF Connect SDK v2.9.1-60d0d6c8d42d ***
*** Using Zephyr OS v3.7.99-ca954a6216c9 ***
I: Starting bootloader
I: Image index: 0, Swap type: none
I: Bootloader chainload address offset: 0x38000
All pins have been configured as non-secure
Booting TF-M v2.1.0
[Sec Thread] Secure image initializing!
TF-M Float ABI: Hard
Lazy stacking enabled

It looks like it knows that there is something to check on the external flash, since I get some messages from it, but it does not use it to boot.

I get the following information when I apply the imgtool dumpinfo zephyr.signed.bin command:

#### Image header (offset: 0x0) ############################
magic:              0x96f3b83d
load_addr:          0x0
hdr_size:           0x200
protected_tlv_size: 0x0
img_size:           0x5cc64
flags:              0x0
version:            4.1.2+0

.......

#### Image trailer (offset: unknown) #######################
(Note: some fields may not be used, depending on the update
strategy)

swap status: (len: unknown)
enc. keys:   Image not encrypted
swap size:   unknown
swap_info:   INVALID (0xff)
copy_done:   INVALID (0xff)
image_ok:    SET (0x1)

After this there was a boot magic field but I thought that it is not necessary to share in this message.

Is there anything here that does not seem correct?

Thank you very much,

Daniel

EDIT: I am also showing what I have set as a pm_static.yaml:

mcuboot_secondary:
  region: external_flash
  address: 0x00000
  size: 0xe0000

RE: I can't use mcuboot to boot a firmware on my external flash

Vidar Berg — Tue, 29 Apr 2025 17:30:54 GMT

Hi Daniel,

I don't see any issues with the configurations you've posted. Are you testing with a nRF9161 DK? In that case, you should have debug logging over UART enabled by default in mcuboot.

If you are loading the firmware image (zephyr.signed.bin) directly to external flash via your debugger, you must also include the MCUboot image trailer to signal the bootloader that it should swap the image. (The trailer is usually created by the application after it has received the image). To make the zephyr.signed.bin file from the build output include the trailer, you can add either CONFIG_MCUBOOT_EXTRA_IMGTOOL_ARGS="--pad" or CONFIG_MCUBOOT_EXTRA_IMGTOOL_ARGS="--confirm" to your prj.conf file.

Note: to check the content of your signed binary, you can run "imgtool dumpinfo zephyr.signed.bin" from your terminal.

Best regards,

Vidar