Provision nRF5340 KMU Externally

Is it possible to provision an nRF5340 KMU through the SWD interface, similar to what nRF docs describe for CRACEN on nRF54-series parts here?
https://nrfconnectdocs.nordicsemi.com/ncs/latest/nrf/app_dev/device_guides/kmu_guides/kmu_provisioning_overview.html

I understand that the 5340 series cannot use the CRACEN crypto, so I am using CryptoCell-312. My goal is to essentially be able to replicate nrf_cc3xx_platform_kmu_write_key_slot() from an an external host (SWD/JTAG, nrfjprog, or any Nordic tool). Is there any supported method to achieve this?

  • Hi, 

    The key provisioning mechanism on the nRF54L works by flashing a small RAM loader that executes the firmware needed to program the keys into the KMU slots.

    You can try replicating a similar approach for the nRF5340 by writing a custom RAM loader that calls nrf_cc3xx_platform_kmu_write_key_slot(). While this falls outside our standard support scope, it is a feasible path to explore.

    Regards,
    Amanda H.

     

Related