memfault: remove redundant cert provisioning for nrf91x targets

gminn · rlubos · commit 5cefa6d3011b · 2026-05-28T14:57:34.000+02:00
Cert provisioning is now handled in the Memfault firmware SDK for nrf91x
targets. `CONFIG_MEMFAULT_NCS_PROVISION_CERTIFICATES` will remain for
nRF7002 targets for now which is not yet configured automatically by
Memfault.

Signed-off-by: Gillian Minnehan &lt;gillian.minnehan@nordicsemi.no&gt;
Jira: CLOUDMCU-76
diff --git a/doc/nrf/libraries/debug/memfault_ncs.rst b/doc/nrf/libraries/debug/memfault_ncs.rst
@@ -110,7 +110,6 @@ Following are some of the configuration options that Memfault SDK defines:
 * :kconfig:option:`CONFIG_MEMFAULT_METRICS`
 * :kconfig:option:`CONFIG_MEMFAULT_METRICS_DEFAULT_SET_ENABLE`
 * :kconfig:option:`CONFIG_MEMFAULT_HTTP_PERIODIC_UPLOAD`
-* :kconfig:option:`CONFIG_MEMFAULT_ROOT_CERT_STORAGE_NRF9160_MODEM`
 
 For more details on each option, use ``menuconfig`` or ``guiconfig``, and see the Kconfig sources in ``modules/lib/memfault-firmware-sdk/ports/zephyr/Kconfig``.
 
diff --git a/doc/nrf/releases_and_maturity/releases/release-notes-changelog.rst b/doc/nrf/releases_and_maturity/releases/release-notes-changelog.rst
@@ -816,6 +816,9 @@ Memfault integration
   * Devicetree support for the internal flash coredump backend (:kconfig:option:`CONFIG_MEMFAULT_NCS_INTERNAL_FLASH_BACKED_COREDUMP`).
     The backend now locates its storage from a fixed partition labeled ``memfault_coredump_partition`` when Partition Manager is disabled, while continuing to support Partition Manager when enabled.
   * The :ref:`snippet-memfault-coredump` snippet that supplies a board-specific partition overlay for flash-backed coredump storage on common DKs and Thingy:91 or Thingy:91 X.
+* Removed the ``CONFIG_MEMFAULT_NCS_PROVISION_CERTIFICATES`` Kconfig option from nRF91x targets.
+  Certificate provisioning for nRF91x targets is now handled automatically by the `Memfault firmware SDK`_.
+  The option remains available for nRF7002 targets, which do not have automatic cert provisioning.
 
 AVSystem integration
 --------------------
diff --git a/modules/memfault-firmware-sdk/Kconfig b/modules/memfault-firmware-sdk/Kconfig
@@ -153,7 +153,6 @@ config MEMFAULT_NCS_INIT_PRIORITY
 
 config MEMFAULT_NCS_PROVISION_CERTIFICATES
 	bool "Provision certificates on initalization"
-	default y if MEMFAULT_ROOT_CERT_STORAGE_NRF9160_MODEM
 	help
 	  Provision required TLS root certificates for connecting to Memfault's
 	  endpoints. If this option is disabled, the user is responsible for
diff --git a/samples/cellular/modem_shell/overlay-memfault.conf b/samples/cellular/modem_shell/overlay-memfault.conf
@@ -21,6 +21,5 @@ CONFIG_HW_ID_LIBRARY_SOURCE_IMEI=y
 # Add to pick up support for sending Memfault data over HTTP
 CONFIG_MEMFAULT_HTTP_ENABLE=y
 
-# nRF9160 only, uses modem to store root CAs
-CONFIG_MEMFAULT_ROOT_CERT_STORAGE_NRF9160_MODEM=y
+# Certificate management
 CONFIG_MODEM_KEY_MGMT=y
diff --git a/samples/debug/memfault/README.rst b/samples/debug/memfault/README.rst
@@ -120,16 +120,13 @@ Check and configure the following options in Memfault SDK that are used by the s
 * :kconfig:option:`CONFIG_MEMFAULT`
 * :kconfig:option:`CONFIG_MEMFAULT_LOGGING_ENABLE`
 * :kconfig:option:`CONFIG_MEMFAULT_LOG_LEVEL_DBG`
-* :kconfig:option:`CONFIG_MEMFAULT_ROOT_CERT_STORAGE_NRF9160_MODEM`
 * :kconfig:option:`CONFIG_MEMFAULT_SHELL`
 * :kconfig:option:`CONFIG_MEMFAULT_HTTP_ENABLE`
 * :kconfig:option:`CONFIG_MEMFAULT_HTTP_PERIODIC_UPLOAD`
 * :kconfig:option:`CONFIG_MEMFAULT_HTTP_PERIODIC_UPLOAD_INTERVAL_SECS`
 * :kconfig:option:`CONFIG_MEMFAULT_HTTP_PERIODIC_UPLOAD_USE_DEDICATED_WORKQUEUE`
 * :kconfig:option:`CONFIG_MEMFAULT_COREDUMP_COLLECT_BSS_REGIONS`
 
-If :kconfig:option:`CONFIG_MEMFAULT_ROOT_CERT_STORAGE_NRF9160_MODEM` is enabled, TLS certificates used for HTTP uploads are provisioned to the nRF91 Series modem when :c:func:`memfault_zephyr_port_install_root_certs` is called.
-
 Check and configure the following options for Memfault that are specific to |NCS|:
 
 * :kconfig:option:`CONFIG_MEMFAULT_NCS_PROJECT_KEY`
diff --git a/samples/debug/memfault/boards/nrf9151dk_nrf9151_ns.conf b/samples/debug/memfault/boards/nrf9151dk_nrf9151_ns.conf
@@ -21,7 +21,6 @@ CONFIG_HW_ID_LIBRARY_SOURCE_IMEI=y
 CONFIG_MODEM_INFO=y
 
 # Certificate management
-CONFIG_MEMFAULT_ROOT_CERT_STORAGE_NRF9160_MODEM=y
 CONFIG_MODEM_KEY_MGMT=y
 
 # AT command capability in shell
diff --git a/samples/debug/memfault/boards/nrf9160dk_nrf9160_ns.conf b/samples/debug/memfault/boards/nrf9160dk_nrf9160_ns.conf
@@ -21,7 +21,6 @@ CONFIG_HW_ID_LIBRARY_SOURCE_IMEI=y
 CONFIG_MODEM_INFO=y
 
 # Certificate management
-CONFIG_MEMFAULT_ROOT_CERT_STORAGE_NRF9160_MODEM=y
 CONFIG_MODEM_KEY_MGMT=y
 
 # AT command capability in shell
diff --git a/samples/debug/memfault/boards/nrf9161dk_nrf9161_ns.conf b/samples/debug/memfault/boards/nrf9161dk_nrf9161_ns.conf
@@ -21,7 +21,6 @@ CONFIG_HW_ID_LIBRARY_SOURCE_IMEI=y
 CONFIG_MODEM_INFO=y
 
 # Certificate management
-CONFIG_MEMFAULT_ROOT_CERT_STORAGE_NRF9160_MODEM=y
 CONFIG_MODEM_KEY_MGMT=y
 
 # AT command capability in shell
diff --git a/samples/debug/memfault/boards/thingy91_nrf9160_ns.conf b/samples/debug/memfault/boards/thingy91_nrf9160_ns.conf
@@ -18,7 +18,6 @@ CONFIG_HW_ID_LIBRARY_SOURCE_IMEI=y
 CONFIG_MODEM_INFO=y
 
 # Certificate management
-CONFIG_MEMFAULT_ROOT_CERT_STORAGE_NRF9160_MODEM=y
 CONFIG_MODEM_KEY_MGMT=y
 
 # AT command capability in shell
diff --git a/samples/debug/memfault/boards/thingy91x_nrf9151_ns.conf b/samples/debug/memfault/boards/thingy91x_nrf9151_ns.conf
@@ -18,7 +18,6 @@ CONFIG_HW_ID_LIBRARY_SOURCE_IMEI=y
 CONFIG_MODEM_INFO=y
 
 # Certificate management
-CONFIG_MEMFAULT_ROOT_CERT_STORAGE_NRF9160_MODEM=y
 CONFIG_MODEM_KEY_MGMT=y
 
 # AT command capability in shell
