secure bootloader in NCS v1.6.1

[Sunil vignesh]

Hi,

I am trying to implement FOTA in my application. I can implement non secure bootloader and run successful

in prj.conf

# Added for FOTA
CONFIG_BOOTLOADER_MCUBOOT=y
CONFIG_MCUMGR=y
CONFIG_MCUMGR_CMD_OS_MGMT=y
CONFIG_MCUMGR_CMD_IMG_MGMT=y
CONFIG_MCUMGR_SMP_BT=y
CONFIG_IMG_ERASE_PROGRESSIVELY=y
CONFIG_MCUMGR_SMP_BT_AUTHEN=n

in main.c

// For FOTA
#ifdef CONFIG_MCUMGR_CMD_FS_MGMT
#include <device.h>
#include <fs/fs.h>
#include "fs_mgmt/fs_mgmt.h"
#include <fs/littlefs.h>
#endif
#ifdef CONFIG_MCUMGR_CMD_OS_MGMT
#include "os_mgmt/os_mgmt.h"
#endif
#ifdef CONFIG_MCUMGR_CMD_IMG_MGMT
#include "img_mgmt/img_mgmt.h"
#endif
#ifdef CONFIG_MCUMGR_CMD_STAT_MGMT
#include "stat_mgmt/stat_mgmt.h"
#endif
#ifdef CONFIG_MCUMGR_SMP_BT
#include "mgmt\mcumgr\smp_bt.h"
#endif
#ifdef CONFIG_MCUMGR_CMD_SHELL_MGMT
#include "shell_mgmt/shell_mgmt.h"
#endif
#ifdef CONFIG_MCUMGR_CMD_FS_MGMT
#include "fs_mgmt/fs_mgmt.h"
#endif
...


void main() {
....

.....
...
...

    // For FOTA
        os_mgmt_register_group();
        img_mgmt_register_group();
        smp_bt_register();
    while(1)
    {
    ...
    }
}

And Now I am need to add secure bootloader

generate priv.pem and placed in

and added these line extra in prj.conf

CONFIG_SECURE_BOOT=y
CONFIG_SB_SIGNING_KEY_FILE="priv.pem"

but project getting failed

how to add secure bootloader to our project

and also

How to use Single slot bank instead of using Dual banking

[Amanda Hsieh]

Hi Sunil, 

See this tutorial. You need the following configuration:

CONFIG_SECURE_BOOT=y
CONFIG_BUILD_S1_VARIANT=y
CONFIG_FW_INFO=y
CONFIG_FW_INFO_FIRMWARE_VERSION=1
CONFIG_SB_SIGNING_KEY_FILE="priv.pem"

You could do serial dfu within the bootloader itself. Otherwise, it has to be "dual banked"

Regards,
Amanda

[Sunil vignesh]

Hi Amanda, Have you check it.

Is there any holidays or still lock down going there.

Why there is an delay in response and assigning engineer for new ticket getting late

[Amanda Hsieh]

Hi, 

I am working on your case, but cannot reproduce the issue. 

It should generate s1_image.hex in the early stage. Try to delete the build folder and create again.

Here is for your reference. peripheral_uart_v1.6.1_#275731.zip

-Amanda 

[Sunil vignesh]

I found that child_image folder is not there does i need to work the board with only 32MHZ.