nRF9160 Security Provisioning (Documentation/Tools)

[Gus]

Hello:

I'm currently evaluating the nRF9160 and I noticed there is a Cryptocell-310 module to provide Root of Trust, along with KMU and OTP to manage as part of the chip security.

But I don't see any document regarding how to Provision the OTP to secure the device, so I'm not sure if there is any tool for that or an example to follow.

I guess once development is done, we should provision the chip to set it in a "Secure" state before releasing it to the market.

Can you please elaborate on this point?

Regards;

Gus

[Øyvind]

Hi Gus, 

Have you seen the documentation under KMU and Usage in the nRF9160 Product Specification? This is currently all I could find in writing at the moment. I will forward the question our our R&D guys. 

Kind regards,
Øyvind

[Øyvind]

Update: 

Our team refers to the Bootloader Storage. Here the provisioned data is stored in the one-time programmable (OTP) region of UICR, if available (for example, on nRF9160 and the nRF5340 application core).

I hope this answers your question. Let me know if you need more details. 

Kind regards,
Øyvind

[Øyvind]

Update 2:

We have some Crypto Library API documentation available in the nrfxlib repo. Unfortunately, we do not have any other samples available. 

-Øyvind

[naum_18]

Hello! Is there any ways for KMU to work with TFM?
Thanks)

[Øyvind]

Hello, 

Please open a new ticket and provide more details on what you are trying to achieve, and what device you are targeting. 

Thanks.

Kind regards,
Øyvind