UNABLE TO GENERATE PRIVATE KEY

RE: UNABLE TO GENERATE PRIVATE KEY

AndreasF — Wed, 03 Apr 2019 05:52:33 GMT

Great, I will close this ticket then.

Best regards,

Andreas

RE: UNABLE TO GENERATE PRIVATE KEY

inghowe83 — Wed, 03 Apr 2019 00:38:20 GMT

Hi Andrea,

I fixed the problem.

I assigned a wrong softdevice code when prepare the dfu package! I should use 0xAE.

RE: UNABLE TO GENERATE PRIVATE KEY

AndreasF — Tue, 02 Apr 2019 11:47:36 GMT

Hi.

Could you create a new ticket for this issue?

Since this question is not the same as the one asked in the start of this ticket, and it will be hard for other community members to find it when they are searching.

Best regards,

Andreas

RE: UNABLE TO GENERATE PRIVATE KEY

inghowe83 — Tue, 02 Apr 2019 00:46:10 GMT

Hi Andreas,

Thanks for providing the step. I verify your step and notice I wasn't able to program the device.

1) Connect to DFUTARG.

2) Select file type -> Distribution packet (Zip)

3) Select app_dfu_package.zip

4) The app show Disconnecting without the dfu programming progress bar.

RE: UNABLE TO GENERATE PRIVATE KEY

AndreasF — Wed, 13 Mar 2019 08:36:39 GMT

Hi.

If you want to enter DFU mode there are other ways to do that without the use of a button. For example:

Pin reset (NRF_BL_DFU_ENTER_METHOD_PINRESET),
Special value in GPREGRET register (NRF_BL_DFU_ENTER_METHOD_GPREGRET),
Request from the application written to the settings page (NRF_BL_DFU_ENTER_METHOD_BUTTONLESS).

All these are described in the DFU mode section in DocLib.

If you want to start in DFU mode just enter DFU mode on start up and set for example NRF_BL_DFU_INACTIVITY_TIMEOUT_MS to 30 seconds.

You can follow the implementation guide of the Buttonless Secure DFU service, this will show you how to enter DFU mode from the Application.

Best regards,

Andreas

RE: UNABLE TO GENERATE PRIVATE KEY

arshdeep — Tue, 12 Mar 2019 19:38:34 GMT

Hi Andreas,

I have been told that i will be answered on Thursday/Friday. We are in a rush now. Will you able to provide some insights on this ?

Thanks,

RE: UNABLE TO GENERATE PRIVATE KEY

AndreasF — Tue, 12 Mar 2019 09:54:39 GMT

Hi.

I see that you created a new ticket for this question, so it will be answered there by one of my colleagues.

Best regards,

Andreas

RE: UNABLE TO GENERATE PRIVATE KEY

arshdeep — Mon, 11 Mar 2019 22:17:25 GMT

Hi Andreas,

Yes i figured that by reading through the app notes that I will not have to upload the bootloader again. But my big question is how to switch to DFU mode without a button ??Our custom board does not have a dedicated button for this task .

So we will like our board to always start in a DFU mode, look for new firmware package for initial 30sec and switch back to normal application after that. This will happen every time we power up the board.

To achieve this, I was reading a lot about DFU_BUTTONLESS example but could not figure out the right procedure to do so.

Will I have to change the structure of my application or will this logic be implemented inside the bootloader?

Can you please provide some guiding steps to do so and if possible a pseudo code .

Thanks,

Arshdeep

RE: UNABLE TO GENERATE PRIVATE KEY

AndreasF — Mon, 11 Mar 2019 11:36:33 GMT

Hi.

Sorry for the late reply, I have been away for a few days.

It depends on what you want to upgrade.

The reason for programming the bootloader first in the examples, is that we need a bootloader in order to do the DFU. If your Application already has a bootloader, you don't need to program another bootloader.

The DFU procedure is well documented here, could you take a look at that?

Best regards,

Andreas

RE: UNABLE TO GENERATE PRIVATE KEY

arshdeep — Wed, 06 Mar 2019 16:48:14 GMT

Hi Andreas,

It did work!!! You were a great help and support . I am glad to be using a Nordic product.

I only have one last question, which if you will say I can open a separate ticket for:

What will be the procedure for our customers to be able to upgrade the firmware using OTA DFU? I see that every time we will have to do a DFU, we need to program the bootloader first . How will our customer using the product will do that ?

Every time we have a new firmware release, will we have to generate a new set of private and public key ?

Thanks again Andreas for all the help.

Regards,

Arshdeep

RE: UNABLE TO GENERATE PRIVATE KEY

AndreasF — Wed, 06 Mar 2019 11:42:52 GMT

Hi.

Sorry for the confusion, I will try to make things a bit clearer.

nrfjprog is a part of the nRF5x Command Line Tools and you can find a user guide here. The installation is described here. And a command reference list is described here. When you have installed the Command Line Tools, you can open a cmd window and type "nrfjprog.exe -e". This will erase available code and UICR flash areas and reset the device, like this:

The bootloader question:

Can we start from scratch, where you follow this procedure:

Step 1.

Generate a private key by running this command in cmd in your SDK 15 folder:

nrfutil keys generate priv.pem

Step 2.

Generate a public key file from that private key by running this command in cmd in your SDK 15 folder:

nrfutil keys display --key pk --format code priv.pem --out_file dfu_public_key.c

You should now have a file named dfu_public_key.c in your SDK 15 folder.

Step 3.

Open the folder nRF5_SDK_15.0.0_a53641a\examples\dfu

You see that there is a file named dfu_public_key.c, delete this file.

Take the file you generated in step 2 and move it to this folder.

Step 4.

Open up the SES project in the folder nRF5_SDK_15.0.0_a53641a\examples\dfu\secure_bootloader\pca10056_ble\ses and build it.

After you have built it the folders: \Output\Release\Exe will appear in the folder structure. Open these folders and copy the file named secure_bootloader_ble_s140_pca10056.hex to your SDK 15 folder. This is the .hex file for the secure bootloader you have created.

Step 5.

Open the folder nRF5_SDK_15.0.0_a53641a\components\softdevice\s140\hex, and copy the .hex file s140_nrf52_6.0.0_softdevice.hex to your SDK 15 folder.

Step 6.

Create an application, for example the ble_app_bms example, and copy the .hex file as you did for the bootloader to your SDK 15 folder (you find the .hex file in nRF5_SDK_15.0.0_a53641a\examples\ble_peripheral\ble_app_bms\pca10056\s140\ses\Output\Release\Exe, named ble_app_bms_pca10056_s140.hex)

Step 7.

Generate a bootloader settings page by running this command in cmd in your SDK 15 folder:

nrfutil settings generate --family NRF52840 --application ble_app_bms_pca10056_s140.hex --application-version 3 --bootloader-version 2 --bl-settings-version 1 settings.hex

The output looks like this:

Step 8.

Merge the settings.hex and secure_bootloader_ble_s140_pca10056.hex together by running this command in cmd in your SDK 15 folder:

mergehex.exe --merge settings.hex secure_bootloader_ble_s140_pca10056.hex --output my_bootloader.hex

The output looks like this:

Step 9.

Generate the DFU packet by running this command in cmd in your SDK 15 folder:

nrfutil pkg generate --hw-version 52 --application-version 3 --application ble_app_bms_pca10056_s140.hex --sd-req 0xA9 --key-file priv.pem app_dfu_package.zip

The output looks like this:

Step 10.

You should now have these files in the SDK 15 folder:

app_dfu_package.zip

ble_app_bms_pca10056_s140.hex

my_bootloader.hex

priv.pem

s140_nrf52_6.0.0_softdevice.hex

secure_bootloader_ble_s140_pca10056.hex

settings.hex

Step 11.

Open the SDK 15 folder in cmd, and write the commands:

nrfjprog.exe -e

nrfjprog.exe --program s140_nrf52_6.0.0_softdevice.hex --verify

nrfjprog.exe --program my_bootloader.hex --verify -r

The output looks like this:

You have now programmed the SoftDevice and the Bootloader including the bootloader settings page.

Step 12.

Open nRF Connect on your mobile phone and scan:

When you find DfuTarg click on Connect.

And click on the DFU button and Select distribution packet (ZIP)

And select the file app_dfu_package.zip.

After you have finished the device will reset and start advertising as Nordic_BMS

Does this make things a bit clearer?

Best regards,

Andreas

RE: UNABLE TO GENERATE PRIVATE KEY

arshdeep — Tue, 05 Mar 2019 23:58:01 GMT

Also can you please tell the steps to erase the memory using command line tools (nrfprog -e) . Have never used command line tool. or is there any other way to do so ? if knew how to do it using nrfGo studio but now that does not work .

Thanks,

RE: UNABLE TO GENERATE PRIVATE KEY

arshdeep — Tue, 05 Mar 2019 16:07:32 GMT

How do I build the bootloader using the private key? it should be the public key right ??

As I told you, I did try this procedure once but now every time I flash (with normal SES IDE using a USB cable, not even with dfu) any program from ble_peripheral example, I end up in a DFU mode Though it works fine if I flash any program from peripheral example.

see in the attached pictures, I flashed ble_app_bms example but the board is advertising as DfuTarg

RE: UNABLE TO GENERATE PRIVATE KEY

AndreasF — Tue, 05 Mar 2019 09:36:25 GMT

Hi.

Sorry about the confusion, I wrote wrong in step one, i should have been "build", and then you could program it later.

If you use your phone, then you don't need a second board, I thought that you had two boards, sorry about that.

nRFgoStudio is outdated, so you should not use that. You should use nRF Connect for Desktop and the nRF Connect Programmer Application.

I did the procedure with my mobile phone now, and it succeeded.

I built the bootloader with the private key and programmed it onto the board.

I then built the blinky application.

I then created the DFU packet with the command in my previous reply.

And then I did as you show in your pictures and selected the zip file I generated.

When I finished, the board resets and LED 1 is on.

Does this happen with your board?

Best regards,

Andreas

RE: UNABLE TO GENERATE PRIVATE KEY

arshdeep — Mon, 04 Mar 2019 23:58:54 GMT

Hi Andreas,

1) Program the bootloader found in the folder\examples\dfu\secure_bootloader\pca10056_ble_debug with the private key you generated. : You mean public_key.c right ??? and not the private key .

5) Program the bootloader from step 1. : Program the bootloader again? I did not understand this . should I program the bootloader in the second board ?

6) Open nRF Connect Bluetooth Low Energy and try to do the DFU from your second board. How to do the DFU using the second board ? I do not know. Do you have any link where i can learn how to do DFU using second board.

Also, my nrfGo studio is not able to detect boards :

It used to work fine in past. I tried uninstalling and installing it again. Did not work. Does this give any clues for DFU ?

Also please check the steps that i do when connected through nrfConnect app:

RE: UNABLE TO GENERATE PRIVATE KEY

AndreasF — Mon, 04 Mar 2019 11:40:33 GMT

Hi Arshdeep.

Can you try to do it the following way:

1) Program the bootloader found in the folder \examples\dfu\secure_bootloader\pca10056_ble_debug with the private key you generated.

2) Compile the project found in the folder \examples\ble_peripheral\ble_app_blinky\pca10056.

3) Take the .hex file from step 2 and generate the DFU packet with the private key from step 1.

nrfutil pkg generate --hw-version 52 --application-version 1 --application ble_app_blinky_pca10056_s140.hex --sd-req 0xA9 --key-file private.pem app_dfu_package.zip

4) Do a nrfjprog -e on the board to erase the pervious stored memory.

5) Program the bootloader from step 1.

6) Open nRF Connect Bluetooth Low Energy and try to do the DFU from your second board.

Can you post some screenshots and log of the process? Does this work?

Best regards,

Andreas

RE: UNABLE TO GENERATE PRIVATE KEY

arshdeep — Mon, 04 Mar 2019 10:09:02 GMT

Hi Andreas

I did try with bsp example to check if the issue is in softdevice but the error was same.

Thanks

Arshdeep

RE: UNABLE TO GENERATE PRIVATE KEY

AndreasF — Mon, 04 Mar 2019 09:09:31 GMT

Hi.

Can you try to create a DFU packet and add a compiled self compiled version of the blinky project? And don't merge it with the SoftDevice.

Do you get the error then?

Best regards,

Andreas

RE: UNABLE TO GENERATE PRIVATE KEY

arshdeep — Fri, 01 Mar 2019 15:37:23 GMT

nrfutil pkg generate --hw-version 52 --application-version 3 --application ble_app_blinky_pca10056_s140.hex --sd-req 0xA9 --key-file private.pem app_dfu_package.zip

RE: UNABLE TO GENERATE PRIVATE KEY

AndreasF — Fri, 01 Mar 2019 07:27:58 GMT

Hi.

Could you please post the nrfutil command that you used to generate the DFU packet? :-)

Best regards,

Andreas

RE: UNABLE TO GENERATE PRIVATE KEY

arshdeep — Thu, 28 Feb 2019 21:57:36 GMT

Thanks Andreas, I was able to generate the zip folder using the nrfutil but now i am running into 2 new issue ->

1) After uploading the DFU.zip folder to nrf52840 DK from nrf Connect app, it does not run my application and kind of erases everything from board. The upload goes till 100% and seems like it did upload it successfully.

2) After I upload the DFU.zip folder, every time i try to flash another program using SES, it keeps on going in DFU mode. I am unable to exit from DFU mode.

Please Suggest .

Regards,

RE: UNABLE TO GENERATE PRIVATE KEY

AndreasF — Thu, 28 Feb 2019 06:19:50 GMT

[quote user="arshdeep"]Then created a zip folder in Desktop, DFU.zip . Copied the hex file from example SDK ble_app_blinky_pca10056_s140.hex into DFU.zip folder and also copied the private.key in the same folder. [/quote]

Which command did you use in CMD? :-)

You have to use nrfutil to generate a DFU packet.

Best regards,

Andreas

RE: UNABLE TO GENERATE PRIVATE KEY

arshdeep — Wed, 27 Feb 2019 23:25:35 GMT

Yes Of course.

A1. Generate your own private key : Generated

A2. Generate your public key based on your private key : Generated

B1. Compile the uECC library : Compiled, looks like this :

Then went inside folder \nRF5_SDK_15.0.0_a53641a\external\micro-ecc\nrf52nf_keil\armgcc and typed make.

B2. Copy the public_key.c file : copied the public_key.c file here \nRF5_SDK_15.0.0_a53641a\examples\dfu\secure_bootloader and built the example successfully.

Then created a zip folder in Desktop, DFU.zip . Copied the hex file from example SDK ble_app_blinky_pca10056_s140.hex into DFU.zip folder and also copied the private.key in the same folder.

Then tried to send this DFU.zip folder using nrfConnect app.

Thanks,

RE: UNABLE TO GENERATE PRIVATE KEY

AndreasF — Wed, 27 Feb 2019 06:24:22 GMT

Hi.

How did you generate the DFU.zip file? What command did you run?

Could you please explain every step you took from start until you generated the DFU.zip file :-)

Best regards,

Andreas

RE: UNABLE TO GENERATE PRIVATE KEY

arshdeep — Wed, 27 Feb 2019 01:25:55 GMT

Thanks Andreas, It worked with Python2.7

i followed this tutorial: https://devzone.nordicsemi.com/b/blog/posts/getting-started-with-nordics-secure-dfu-bootloader

I tried sending DFU.zip file using nrfConnect app but the application was not able to send the file.

See the attached DFU.zip generated by me.

devzone.nordicsemi.com/.../8270.DFU.zip

can you suggest where i could have been wrong in the steps ?

Thanks,