This post is older than 2 years and might not be relevant anymore
More Info: Consider searching for newer posts

Secure bootloader

I got a device with a secure bootloader, but I lost the private key and the firmware got corrupted somehow. Is it possible to flash a new bootloader via BLE or is it bricked forever?

Parents
  • Hi,

    You can only use correctly signed update images with the secure DFU bootloader. This is the "secure" part of it. If there was a way to do updates without signing them using the private key, this would be a serious security flaw.

    So, unless you have the private key (or an image already signed with the private key) you cannot do a secure DFU, no.

    Only option then would be to connect to the device through the programmer interface, i.e. use a J-Link programmer the same way the device was programmed during development and/or production.

    Regards,
    Terje

Reply
  • Hi,

    You can only use correctly signed update images with the secure DFU bootloader. This is the "secure" part of it. If there was a way to do updates without signing them using the private key, this would be a serious security flaw.

    So, unless you have the private key (or an image already signed with the private key) you cannot do a secure DFU, no.

    Only option then would be to connect to the device through the programmer interface, i.e. use a J-Link programmer the same way the device was programmed during development and/or production.

    Regards,
    Terje

Children
No Data
Related