Disable TF-M from initializing KMU

[Tide]

Hi ,

When I set CONFIG_TFM_PROFILE_TYPE_NOT_SET=y to disable TF-M minimal mode, KMU SLOT MKEK must be empty right? When the KMU is not empty, the app will enter the tfm_hal_system_halt function. Can TF-M initialization write to KMU be disabled in the application?

[dejans]

Hi,

Both MKEK and MEXT hardware unique keys (HUKs) are written during initialization to the crypto partition. If crypto partition is needed and going to be used, HUKs will be written to it. 

Best regards,
Dejan

[Tide]

Hi,

Got it, thank you.