Locking and Unlocking nRF9160 Without Erasing Firmware

[Sparsh Panwar]

Dear Nordic Support Team,

I am currently working with the nRF9160 and exploring secure methods to lock and unlock the device without losing the firmware.

At present, I am using the following commands:
To lock the device:  nrfjprog --rbp ALL --family nRF91
To unlock the device: nrfjprog --recover --family nRF91

I would like to know if Nordic provides any alternative mechanism—such as Secure Debug or public key-based readback protection—that allows locking and unlocking the nRF9160 without erasing the firmware.

Could you please advise if:
1. There is a supported method for secure locking/unlocking on nRF9160 that preserves firmware?
2. Any future updates or tools are planned to enable such functionality?
3. There are recommended best practices for implementing secure access control on nRF9160?

Your guidance would be greatly appreciated.

[SwRa]

Hi Sparsh,

Enabling AP-Protect followed by enabling Erase protection would be a way to do this..  If you enable ERASEPROTECT and APPROTECT at the same time and do not have firmware running on the nRF to unlock the ERASEPROTECT or APPROTECT you will no longer be able to reprogram your chip. There is a discussion here that you can refer: (+) How to enable APPPROTECT, SECUREAPPROTECT and ERASEPROTECT on nRF5340? - Nordic Q&A - Nordic DevZone - Nordic DevZone 

Regards,

Swathy