How to set identity key in tfm configuration?

[skirti]

As per my understanding, identity key can be set using idenitytKey library.

But as the documentation says, " TF-M has access to the identity key using internal APIs and does not need to use this library."

I would like to know how to set identitykey in TFM configuration?

[Einar Thorsrud]

Hi,

Not specifically. The KMU is in the OTP region, which is write once per half-word. So the main thing is that you have full control when the identity key is written, and as long as that holds, it cannot be over-written at a subsequent point (provided that there are no half-words with all zeros in the key).