This post is older than 2 years and might not be relevant anymore
More Info: Consider searching for newer posts

FOTA: Change signature key

Hello

I evaluated FOTA using the http_application_update example. This worked so far until I tried to use my own key for image signing. I created my own PEM-file using the image tool (RSA-2048) and pointed BOOT_SIGNATURE_FILE to my file. The documentation here https://developer.nordicsemi.com/nRF_Connect_SDK/doc/latest/mcuboot/imgtool.html says that I should replace or insert the key into keys.c, however, this was not possible. The buildsystem had already generated a include file containing the public key from my PEM-file (build_nrf9160dk_nrf9160ns\mcuboot\zephyr\autogen-pubkey.c).

So far I generated my own PEM-file and changed the BOOT_SIGNATURE_FILE option. Now the system refuses to boot if I flash the controller: "Unable to find bootable image". Do I really need to sign the image for myself? I mean, it worked using the "root-rsa-2048.pem" file without any futher work before. Or do I miss something? I am not sure, if the build system knows my private key.

I am using SDK version 1.3 with Segger Embedded Studio.

Thanks for your help.
Samuel

Related