DFU - non secure to secure

RE: DFU - non secure to secure

Jenzo — Thu, 02 Mar 2023 08:15:48 GMT

Hi Einar,

I found out. My bad.

Thanks for your help.

Regards

Jens

RE: DFU - non secure to secure

Einar Thorsrud — Fri, 24 Feb 2023 07:34:18 GMT

The bootloader should never be overwritten during an application DFU, so I think we need to investigate a bit more to understand what has happened.

In what way does the bootloader not work? What have you learned by testing / debugging?
Do you have a device with 128 kB or 256 kB lash?
Can you share your memory layout (SoftDevice size, application start address and size, bootloader start address and size etc)?
Do you use single bank or dual bank application updates?
Can you make a flash dump before and after the update so that we can compare and see which regions have change during the DFU procedure? The simplest way to dump the flash is like this (assuming a 256 kB device): nrfjprog --memrd 0 --n 0x40000 > flash_dump.txt

RE: DFU - non secure to secure

Jenzo — Thu, 23 Feb 2023 16:03:27 GMT

One more issue:

When I update the APP on the nRF51822 with zip package then the bootloader does not work anymore / it is overwritten (I guess).

Here is how I created the zip package:

nrfutil dfu genpkg --application-version XXXX --dev-type XXXX --dev-revision XXXX --application app_v21.hex app_v21.zip

How do I preserve the bootloader?

RE: DFU - non secure to secure

Jenzo — Wed, 15 Feb 2023 12:38:57 GMT

Super. Thanks for an excellent service!

RE: DFU - non secure to secure

Einar Thorsrud — Wed, 15 Feb 2023 12:32:40 GMT

Hi,

Updating from the legacy bootloader to the secure bootloader via DFU is not supported. It is technically possible on some nRF52 series devices as described in this post, but I am not able to see how you could do it on the nRF51.

[quote user="Jenzo"]If it is not possible to make convert to a secure bootloader, how do I create a dfu package with the nrfutil tool? We have tried but it forces us to use a private key. [/quote]

You need to use an older version of nrfutil in order to generate packages for the legacy bootloader, specifically nrfutil 0.5.2. This is the latest release with support for the legacy bootloader used in SDK 9.

RE: DFU - non secure to secure

Jenzo — Wed, 15 Feb 2023 10:48:15 GMT

in addtion to the above:

If it is not possible to make convert to a secure bootloader, how do I create a dfu package with the nrfutil tool? We have tried but it forces us to use a private key.