Secure DFU, update from a remote server

RE: Secure DFU, update from a remote server

lybrus — Fri, 26 Mar 2021 08:08:09 GMT

Everything is ok. nrf_pwr_mgmt_shutdown(NRF_PWR_MGMT_SHUTDOWN_RESET); works. I needed to wait untill nrf_dfu_settings_write_and_backup finish.

RE: Secure DFU, update from a remote server

lybrus — Thu, 25 Mar 2021 23:22:23 GMT

I've done, dfu works =) But I have a stupid problem with i.3 (reboot the MCU). How to do it correct?

I've tried:

// 1
nrf_pwr_mgmt_shutdown(NRF_PWR_MGMT_SHUTDOWN_RESET);

// 2
NVIC_SystemReset();

But it doesn't work.

If I reboot manually - the bootloader updates firmware.

nrfjprog -r

RE: Secure DFU, update from a remote server

lybrus — Thu, 25 Mar 2021 09:38:15 GMT

Hi Amanda,

Thank you for your reply.

As I understood in the application I can:

Store init packet using nrf_dfu_validation_init_cmd_create, nrf_dfu_validation_init_cmd_append and nrf_dfu_validation_init_cmd_execute. The last one returns the address to store the new firmware packet.
Store new firmware packet using nrf_dfu_flash_store
And just reboot the MCU. Bootloader compiled with NRF_BL_DFU_ALLOW_UPDATE_FROM_APP=1, right?

RE: Secure DFU, update from a remote server

Amanda Hsieh — Thu, 25 Mar 2021 09:20:47 GMT

Hi Damir,

Sorry for the delay.

[quote user="lybrus"]How to get the right address to store firmware? Or I need to write the new firmware to free space and tell the address of the new firmware to the bootloader?[/quote]

See Device Firmware Update process and Dual-bank and single-bank updates doc.

[quote user="lybrus"]How to tell the bootloader to validate the new firmware?[/quote]

Sorry for the delay. Please see the Validation doc.

[quote user="lybrus"]Is it suitable for the softdevice and bootloader update?[/quote]

Yes, see Bootloader and DFU modules doc.

-Amanda H.

RE: Secure DFU, update from a remote server

lybrus — Mon, 22 Mar 2021 15:33:03 GMT

As I understood, I need to store firmware in my application using nrf_fstorage,(like in nrf_dfu_flash.c) build the bootloader with NRF_BL_DFU_ALLOW_UPDATE_FROM_APP=1 and tell the bootloader to validate the new firmware.

So questions:

How to get the right address to store firmware? Or I need to write the new firmware to free space and tell the address of the new firmware to the bootloader?
How to tell the bootloader to validate the new firmware?
Is it suitable for the softdevice and bootloader update?

RE: Secure DFU, update from a remote server

lybrus — Mon, 22 Mar 2021 13:09:16 GMT

As a start point for the bootloader I'm planning to use /nRF5_SDK_17.0.2_d674dde/examples/dfu/secure_bootloader/pca10056_s140_ble to keep DFU using BLE.