nRF54H20: Is there any supported way (now or planned) to field-update MCUboot?

[Mads Fidder]

Hi Nordic team,

I’m working with nRF54H20DK  on nRF Connect SDK v3.2.2 and using MCUboot as the bootloader.

From the current documentation and samples, my understanding is:

On nRF54H20, the boot sequence is Secure-Domain based and cannot be disabled.

NSIB / B0-style immutable bootloaders are not supported on nRF54H20

SUIT was previously used bootloader updates, but from NCS 3.1.0 and later it appears deprecated / removed

Current DFU guidance focuses on MCUboot-based application updates only

MCUboot itself cannot safely update itself and there is no exposed A/B or rollback mechanism for the bootloader

This leads me to conclude that, in NCS ≥ 3.1, MCUboot is effectively treated as immutable in the field, and can only be updated via SWD / service access.

My questions are:

Is there currently any supported way to field-update MCUboot on nRF54H20
(e.g. over USB/OTA, with rollback protection), using public NCS tooling?

If not, is this a deliberate long-term design decision, or are there plans to expose a Secure-Domain–managed mechanism (or alternative to SUIT) for safe MCUboot updates in the future?


Best regards,
Mads

[Amanda Hsieh]

Hi Mads, 

Is there currently any supported way to field-update MCUboot on nRF54H20
(e.g. over USB/OTA, with rollback protection), using public NCS tooling?

Not yet. See the latest NCS v3.2.2 currently https://docs.nordicsemi.com/bundle/ncs-3.2.2/page/nrf/releases_and_maturity/software_maturity.html 

If not, is this a deliberate long-term design decision, or are there plans to expose a Secure-Domain–managed mechanism (or alternative to SUIT) for safe MCUboot updates in the future?

Please contact your regional sales manager or use the form of Sales related questions for the plan/request/schedule/roadmap. 

Regards,
Amanda H. 

[Mads Fidder]

Hello Amanda,

Thank you for your answer. 

Is there anyway that you can elaborate further? Maybe in a private ticket and tell me about more about the schedule? We have a NDA with you guys.

Best regards,
Mads

[Amanda Hsieh]

Hi Mads, 

Please contact your regional sales manager or use the form of Sales related questions for the request/schedule/roadmap. 

-Amanda H.

[Mads Fidder]

Thank you Amanda, i will do that

/Mads

[fredrikgk]

Hei Mads,

There is no plan to enable the first stage boot loader to be updatable. Note though that you are free to use whatever solution you wish as the first boot loader (it does not have to be MCUBoot). I would recommend moving the features you need to update to a second stage boot loader which follows the initial immutable one. 

Best regards,
Fredrik