nRF Mesh pre-provisioning in production

[blaatschaap]

I am developing a nRF-Mesh based product. This product consists of a fixed number of nodes in a Bluetooth Mesh Network.

Are there possibilities to factory-provision a set of nodes by flashing provisioning data rather then perform over-the-air provisioning each set. Each set should have its own keys, and the nodes are to have the same addresses in each network. Is it possible to generate such provisioning data off-line and flash it during production?

[Mttrinh]

Hi,

Yes, it should be possible to factory-provision a set of nodes by flashing provisioning data. It might take a lot of work to do this depending on how many nodes you need. How many nodes does this product consist of?

[Mttrinh]

Hi,

I assume you want to do factory-provision like OP. Unfortunately we do not have a "guide" to do this, but it is possible to do. You should be able to read flash pages via flash manager and use this to "provision" other nodes directly. I suggest you to have a look through the provisioner example code, interactive pyaci script and documentation found on infocenter. With that said, we do not recommend you to do this because of security reasons.

[Andre]

What are the security considerations here? How is writing the data to flash directly less secure then running a provisioner for each set? (Which would mean, an extra production step, which is prone to error, as all the devices must be powered on in sequence and it must be verified they are provioned correctly before the next device can be turned on, etc. so basically, we want to skip that step)

(Blaatschaap is my other account I created when this one was broken)