Failed to generate ECC key -134 when build nrf5340 with TFM in NCS 3.0.1

Hello, I just try to migrate our developing project from old parent-child build to sysbuild,

But when I build the project with non-secure cpu (with TFM), I get the <err> bt_ecc: Failed to generate ECC key -134.

No problem when I build with secure cpu.

[00:00:02.003,540] <inf> fs_nvs: 2 Sectors of 4096 bytes
[00:00:02.003,540] <inf> fs_nvs: alloc wra: 0, fd0
[00:00:02.003,540] <inf> fs_nvs: data wra: 0, 1c
[00:00:02.032,104] <inf> bt_hci_core: HW Platform: Nordic Semiconductor (0x0002)
[00:00:02.032,135] <inf> bt_hci_core: HW Variant: nRF53x (0x0003)
[00:00:02.032,135] <inf> bt_hci_core: Firmware: Standard Bluetooth controller (0x00) Version 137.20634 Build 2617349514
[00:00:02.032,470] <inf> bt_hci_core: No ID address. App must call settings_load()
[00:00:02.032,592] <err> bt_ecc: Failed to generate ECC key -134
[00:00:02.032,623] <wrn> bt_smp: Public key not available
[00:00:02.033,172] <inf> bt_hci_core: Identity: DD:A9:46:4E:C5:EA (random)
[00:00:02.033,203] <inf> bt_hci_core: HCI: version 6.0 (0x0e) revision 0x20f3, manufacturer 0x0059
[00:00:02.033,203] <inf> bt_hci_core: LMP: version 6.0 (0x0e) subver 0x20f3
[00:00:02.033,264] <err> bt_gatt: Unable to import the key for AES CMAC -134
[00:00:02.034,973] <inf> app: Advertising successfully started
[00:00:02.042,572] <err> bt_gatt: Unable to import the key for AES CMAC -134

Here is the content of prj.conf and sysbuild.conf


#
# Copyright (c) 2020 Nordic Semiconductor ASA
#
# SPDX-License-Identifier: LicenseRef-Nordic-5-Clause
#


#System
CONFIG_NVS=y
CONFIG_SETTINGS=y
CONFIG_BT_SETTINGS=y
CONFIG_FLASH=y
CONFIG_FLASH_MAP=y
CONFIG_FLASH_PAGE_LAYOUT=y
CONFIG_NEWLIB_LIBC=y
CONFIG_HEAP_MEM_POOL_SIZE=163840
CONFIG_DYNAMIC_THREAD=y

# CRYPTO
CONFIG_NRF_SECURITY=y
CONFIG_PSA_WANT_GENERATE_RANDOM=y

# Peripherals
CONFIG_NRFX_QSPI=n
CONFIG_NRFX_TIMER1=y
CONFIG_NRFX_TIMER2=y
CONFIG_NRFX_SPIM4=y
CONFIG_NRFX_SAADC=y
CONFIG_NRFX_TWIM1=y
CONFIG_NRFX_PWM0=y
CONFIG_NRFX_RTC0=y
CONFIG_NRFX_GPIOTE1=y

#LOGGING
CONFIG_RTT_CONSOLE=y
CONFIG_USE_SEGGER_RTT=y
CONFIG_LOG=y
CONFIG_PRINTK=y
CONFIG_NRFX_SPIM_LOG=n
CONFIG_NRFX_TWIM_LOG=n
CONFIG_NRFX_TIMER_LOG=n
CONFIG_BT_SMP_LOG_LEVEL_DEFAULT=y

#BLE
CONFIG_BT=y
CONFIG_BT_SMP=y
CONFIG_BT_PERIPHERAL=y
CONFIG_BT_DEVICE_APPEARANCE=833

#BLE Security
CONFIG_BT_BMS=y
CONFIG_BT_BONDABLE=y
CONFIG_BT_MAX_PAIRED=4
CONFIG_BT_SMP_APP_PAIRING_ACCEPT=y
CONFIG_BT_SMP_ENFORCE_MITM=y

# DFU over BLE
CONFIG_NCS_SAMPLE_MCUMGR_BT_OTA_DFU=y
CONFIG_NCS_SAMPLE_MCUMGR_BT_OTA_DFU_SPEEDUP=y

#Secure BOOT
CONFIG_SECURE_BOOT=y
CONFIG_BOOTLOADER_MCUBOOT=y
CONFIG_MCUBOOT_IMG_MANAGER=y
CONFIG_FW_INFO=y

# DFU Dependence
CONFIG_IMG_MANAGER=y
CONFIG_IMG_BLOCK_BUF_SIZE=2048

CONFIG_ZCBOR=y
CONFIG_MCUMGR=y
CONFIG_MCUMGR_GRP_IMG=y
CONFIG_MCUMGR_GRP_OS=y
CONFIG_MCUMGR_GRP_IMG_UPLOAD_CHECK_HOOK=y
CONFIG_MCUMGR_MGMT_NOTIFICATION_HOOKS=y

CONFIG_MCUMGR_TRANSPORT_BT=y
CONFIG_MCUMGR_TRANSPORT_BT_PERM_RW=y
CONFIG_MCUMGR_TRANSPORT_BT_CONN_PARAM_CONTROL=y

CONFIG_STREAM_FLASH=y
CONFIG_STREAM_FLASH_ERASE=y
CONFIG_BT_DFU_SMP=y
CONFIG_HW_ID_LIBRARY=y

SB_CONFIG_BOOTLOADER_MCUBOOT=y
SB_CONFIG_MCUBOOT_USE_ALL_AVAILABLE_RAM=y

SB_CONFIG_BOOT_SIGNATURE_KEY_FILE="\${APP_DIR}/private_key.pem"
SB_CONFIG_BOOT_SIGNATURE_TYPE_ECDSA_P256=y
SB_CONFIG_PARTITION_MANAGER=y

SB_CONFIG_SECURE_BOOT_NETCORE=y
SB_CONFIG_NETCORE_APP_UPDATE=y
SB_CONFIG_NETCORE_HCI_IPC=y

SB_CONFIG_DFU_MULTI_IMAGE_PACKAGE_BUILD=y
SB_CONFIG_DFU_MULTI_IMAGE_PACKAGE_APP=y
SB_CONFIG_DFU_MULTI_IMAGE_PACKAGE_NET=y

SB_CONFIG_MCUBOOT_NRF53_MULTI_IMAGE_UPDATE=y

Related