nrf9160 with only non-secure partitions/code on a custom board

RE: nrf9160 with only non-secure partitions/code on a custom board

helsing — Wed, 29 Jun 2022 14:37:21 GMT

Great to hear. Please let me know if you have any more questions.

RE: nrf9160 with only non-secure partitions/code on a custom board

SINR — Tue, 28 Jun 2022 13:58:29 GMT

Thank you so much for the reply and the explanation! I have things going here but was just figuring out possible S/NS configurations before I moved forward further. The links are so greatly appreciated!

RE: nrf9160 with only non-secure partitions/code on a custom board

helsing — Tue, 28 Jun 2022 12:33:29 GMT

Sorry for the delay.

TF-M minimal configuration will become more or less mandatory from our end. It is very small footprint and it only provides one service to the non-secure world(which is the ability to get RNG numbers out). If everything is to be placed in the same domain, then that would need to be the secure domain. Everything in the non-secure domain is not possible. In any case, modem_library can only be used from non-secure.

From the documentation:

The Modem library needs a region of RAM within the first lower 128KB to share with the modem. To be accessible by both the modem and the application, this region of RAM must be configured as non-secure by the secure application.

Please also have a look at the T-FM secure peripheral partion sample.

RE: nrf9160 with only non-secure partitions/code on a custom board

helsing — Thu, 23 Jun 2022 14:00:24 GMT

If you would like to certify your product, then using the secure/non-secure setup is a requirements. I will get back to you with a few links.

RE: nrf9160 with only non-secure partitions/code on a custom board

SINR — Mon, 20 Jun 2022 16:32:44 GMT

It is an experimental project which might turn into a product at some point in the future - at which point I will reevaluate.

RE: nrf9160 with only non-secure partitions/code on a custom board

helsing — Mon, 20 Jun 2022 11:20:45 GMT

Hi,

What is the motivation for this approach? Is certification of your end product a requirement for your application, or is this just an experimental project?