Robust FOTA update, and error -11

RE: Robust FOTA update, and error -11

Simon D-M — Wed, 11 Feb 2026 11:55:47 GMT

Hi Bastien,

[quote user="Bastien42"]Does nRF Cloud implements "Secure OTA Updates with Signing & Hashes" and includes TLS ?[/quote]

The "Signing & Hashes" are entirely handled by MCUboot. The process is explained in lesson 9 exercise 2 of our course nRF connect SDK Intermediate.

And, yes, nRF Cloud uses TLS to perform the FOTA update. Here are some relevant documentation about the FOTA performed by nRF Cloud.

[quote user="Bastien42"]I struggle to see what it is already doing for me.[/quote]

Here is the latest documentation about nRF Cloud.

Best regards,

Simon D-M

RE: Robust FOTA update, and error -11

Bastien42 — Wed, 11 Feb 2026 08:44:36 GMT

Ok, thanks for the information.

Does nRF Cloud implements "Secure OTA Updates with Signing & Hashes" and includes TLS ?

I struggle to see what it is already doing for me.

Best regards

Bastien

RE: Robust FOTA update, and error -11

Simon D-M — Tue, 10 Feb 2026 14:49:49 GMT

You're welcome :)

Just FYI, for new design projects, we recommend using the nRF9151 instead of the nRF9160. It is performing better, has a smaller footprint and costs less. Of course, we won't force you to change to this chip. But I just wanted to make sure you knew that this option exists.

Best regards,

Simon D-M

RE: Robust FOTA update, and error -11

Bastien42 — Tue, 10 Feb 2026 13:50:12 GMT

Thank you for this insightful answer.

I was referring to the nRF Connect SDK Intermediate Exercise 6 Fota over LTE-M/ NB-IoT and I am working with the nRF9160 using MQTT on a custom PCB board.

Regards

Bastien

RE: Robust FOTA update, and error -11

Simon D-M — Tue, 10 Feb 2026 10:28:53 GMT

Hi Bastien,

[quote user=""]What are the gudielines to develop a robust FOTA update implementation ?[/quote]

I would like to recommend some articles from the Memfault blog.

"OTA for IoT: What It Is, How It Works, and Why It Matters" : It is a more general article for OTA. But contains a lot of very useful information on how to make a robust OTA solution.
"OTA Update Checklist for Embedded Devices in 2025" : This one goes more into detail on what to implement on your firmware and how to push the OTA to the device.
"How to Test OTA Updates Without Bricking Devices" : And here they are talking about how to safely do test and push the OTA update to your fleet.

If you manage to implement all of these recommendations, you'll probably have one of the best OTA update system that currently exists ;-)

[quote user=""]My current code is based on the Nordic FOTA sample.[/quote]

Which sample are you referring to ? We have multiple FOTA sample for different protocols and Cloud solutions.

[quote user=""]Here is one error that happened to me, how to make sure it never happens again ?[/quote]

You need to add more error handling. Robustness is not achieved by never having any errors, because that is impossible with cellular, you will always have one device which fails to download something somewhere. It is achieved by having a firmware which is capable of handling all the possible errors that can happen during an update.

Here, in your case, it seems like the download failed for some reason. A possible way to handle this is to wait a little bit, and retry updating later. And maybe, if it fails more than a certain number of time, the device can report that he can't proceed with the update.

Best regards,

Simon D-M