Production utility for flashing and key provisioning

[darav]

We are using the nRF54L15 SoC with FOTA functionality. We have enabled secure FOTA by signing the firmware image and provisioning the public key into the SoC’s KMU. For production, we want to automate both the KMU key provisioning and flashing the firmware (hex/bin) onto the device using a script or PC-based command-line utility.

 

What is the recommended or best option to automate KMU key provisioning and firmware flashing for nRF54L15 in a production environment?

If we want to perform these steps from a PC via command line, do we need the full NCS toolchain and SDK installed, or is there a minimal toolset sufficient for production programming?

[Hung Bui]

Hi Darav, 
The process looks fine to me. 
Could you explain the id you used 0x7fff30e2.
As far as I know when you program the key into KMU you simply select the slot you want to put the key to. See the documentation in the python file: 

    parser.add_argument(
        "--id",
        help="Key identifier (KMU slot number (0-255) for KMU keys)",
        type=lambda number_string: int(number_string, 0),
        required=True,
    )