TFM_PARTITION_INITIAL_ATTESTATION

[Ingfu]

Hi,

we are trying to get the psa attestation on the nrf54l15 to work. We have tried config options for hours but CONFIG_TFM_PARTITION_INITIAL_ATTESTATION always gets 'n'.

Can You provide a minimum prj.conf to get psa_attestation working? The tfm_psa_template also doesn't build for the nrf54dk.

[Einar Thorsrud]

Hi,

PSA Attestation is not yet supported on nRF54L, and this is also why the TF-M: PSA template sample does not yet list nRF54L as supported. Support is planned, but I cannot say when it will be ready.

[Ingfu]

Hi,

https://docs.nordicsemi.com/bundle/nwp_057/page/WP/nwp_057/prod_sec_features/dev_features_54L.html

lists 

Secure Attestation

Yes

is that something different then PSA Attestation?

[Einar Thorsrud]

No, In practice it refers to PSA Attestation. The hardware support is there in the nRF54 series, but software support is not yet ready (though as mentioned it is planned and will come).

[Ingfu]

Any updates?

I'd like to add that it's listed as available on https://docs.nordicsemi.com/bundle/nwp_057/page/WP/nwp_057/prod_sec_features/dev_features_54L.html

You said hardware support is there, software support not yet. Why don't you flag it in the list, just like 

Authenticated Debug

HW supported1

¹ Currently not supported in nRF Connect SDK.

It gives the impression, that the feature is ready to use. We are currently waiting for the device attestation feature as we dont want to ship without it as adding it later might be a risk.

[Einar Thorsrud]

Hi,

The PSA Attestation service is still not supported on nRF54L but the team is looking into it. I do not have a timeline now, but will update when I know more. 

Thank you for the feedback about the nRF54L Series security features table, I have forwarded that internally.