CS 3.1.0 + nRF5340: MCUboot serial recovery in single-slot with signing + encryption

Hi Nordic team,

I am working on nRF5340 and trying to enable MCUboot serial recovery DFU in single-slot mode with both signing and encrypted images.

Environment:
1. SoC/Board: nRF5340 (custom board based on nRF5340)
2. NCS version: 3.1.0
3. Build type: sysbuild + MCUboot. 
5. keys  ( signing and encryption) are generated via imgtool keygen

Goal:
Enable single-slot serial recovery DFU with signed + encrypted updates images

Does NCS3.1.0  support it by correct  configuration ? 

If So, could you please provide me a sample configuration that works. 

Here is my partition :(pm_static.yml)


# Partition used for the primary network core image during FW update
# Size: 256KB
mcuboot_primary_1:
address: 0x0
device: nordic_ram_flash_controller
end_address: 0x40000
region: ram_flash
size: 0x40000


##############################################################################
# Internal flash (App core)
##############################################################################

# MCUboot partition. setting size to 96KB (0x18000)
mcuboot:
address: 0x0
end_address: 0x18000
placement:
before:
- mcuboot_primary
region: flash_primary
size: 0x18000

# Slot for app-core = mcuboot_pad + app
# Starts immediately after MCUboot at 0x18000
mcuboot_primary:
address: 0x18000
end_address: 0xfc000
orig_span: &id001
- mcuboot_pad
- app
region: flash_primary
size: 0xe4000
span: *id001


mcuboot_pad:
address: 0x18000
end_address: 0x18200
placement:
align:
start: 0x4000
before:
- mcuboot_primary_app
region: flash_primary
size: 0x200

# Partition for app-core image (binary starts after the pad at 0x18200)
mcuboot_primary_app:
address: 0x18200
end_address: 0xfc000
orig_span: &id002
- app
region: flash_primary
size: 0xe3e00
span: *id002

# Partition for app-core application.
app:
address: 0x18200
end_address: 0xfc000
region: flash_primary
size: 0xe3e00


# Below partitions are 0 size,

# No app-core secondary image. setting partition size to 0
mcuboot_secondary:
address: 0x18000
end_address: 0x18000
region: flash_primary
size: 0

# No net-core secondary image. setting partition size to 0
mcuboot_secondary_1:
address: 0x18000
end_address: 0x18000
region: flash_primary
size: 0

# No support for mcuboot_primary_2. setting partition size to 0
mcuboot_primary_2:
address: 0x18000
end_address: 0x18000
region: flash_primary
size: 0

# No support for mcuboot_secondary_2. setting partition size to 0
mcuboot_secondary_2:
address: 0x18000
end_address: 0x18000
region: flash_primary
size: 0


# Non-Volatile Storage (NVS) partition in internal flash for settings_storage
settings_storage:
address: 0xfe000
end_address: 0x100000
placement:
before:
- end
region: flash_primary
size: 0x2000

##############################################################################
# Partition used for command exchange between the application core and the
# network core
##############################################################################
pcd_sram:
address: 0x20000000
size: 0x2000
region: sram_primary

Thanks a lot .

-Batu

Related