nRF54L10 - make MCUboot immutable

Hello!

I have 126 kB MCUboot partition which I'd like to make immutable (write protected so it can't be corrupted). I have serial-recovery, KMU key handling, debug optimization, RTT logging enabled. It occupies ~109 kB and I wish not shrink that partition considerably. I'm using nRF Connect SDK v3.2.1.

What are my options?
I've read that there's FPROTECT mechanism (Fail to boot after upgrade to NCS 3.1.1 , https://docs.nordicsemi.com/bundle/ncs-3.1.0/page/nrf/app_dev/device_guides/nrf54l/dfu_config.html) but it seems that's only for first 62 kB of RRAM when CONFIG_FPROTECT_ALLOW_COMBINED_REGIONS is used. Is that setting permanent once it's activated? Does this part of datasheet refers to FPROTECT mechanism (and is it actually 62 kB combined, not 64 kB since RW1 is 5bit (32)))?
   


Also I've read about https://docs.nordicsemi.com/bundle/ps_nrf54L15/page/mpc.html but that doesn't seem permanent either.

Is there ANY other mechanism to protect 126 kB MCUBoot partition against writes on nRF54L10 which I've missed?

Thanks!

Related