Why is it recommended to have version checking enabled when signed updates are being used for DFU?

RE: Why is it recommended to have version checking enabled when signed updates are being used for DFU?

Amanda Hsieh — Mon, 01 Jul 2019 08:21:32 GMT

Hi,

[quote user="luimot"]why version checking needs to be enabled for signed updates?[/quote]

To make sure the compatibility between Hardware/SoftDevice/firmware versions.

See Validation for more information.

The Validation of the image includes checks to verify that the image originates from a trusted source and that it is compatible with the device and the current firmware and hardware. See the nrf_dfu_ver_validation_check() and fw_version_ok() inside the nrf_dfu_ver_validation.c.

If you want to avoid version checking, you can refer to this post.

-Amanda

RE: Why is it recommended to have version checking enabled when signed updates are being used for DFU?

luimot — Sat, 29 Jun 2019 00:11:55 GMT

Hi Amanda,

I've gone over the linked post a couple times and I don't think that it answers the original question. Can you explain which part of the post addresses why version checking needs to be enabled for signed updates?

RE: Why is it recommended to have version checking enabled when signed updates are being used for DFU?

Amanda Hsieh — Wed, 26 Jun 2019 09:24:43 GMT

Hi,

This post might help you.

-Amanda