Samples: tfm: Added 54lv10a 54lm20a/b to tfm tests

PFnord · PFnord · commit bfbc5aa2e974 · 2026-05-06T13:24:53.000+02:00
Added 54l15, 54lm20a/b and 54lv10a to some TFM tests and samples

Signed-off-by: Paul Fleury &lt;paul.fleury@nordicsemi.no&gt;
diff --git a/CODEOWNERS b/CODEOWNERS
@@ -709,6 +709,7 @@
 /samples/zephyr/subsys/settings/          @nrfconnect/ncs-low-level-test
 /samples/zephyr/subsys/usb/               @nrfconnect/ncs-low-level-test
 /samples/zephyr/sysbuild/                 @nrfconnect/ncs-low-level-test
+/samples/zephyr/tfm_integration/          @nrfconnect/ncs-aegir
 
 /samples/**/*.svg                         @nrfconnect/ncs-doc-leads
 /samples/**/*.png                         @nrfconnect/ncs-doc-leads
diff --git a/samples/keys/hw_unique_key/Kconfig.sysbuild b/samples/keys/hw_unique_key/Kconfig.sysbuild
@@ -5,6 +5,6 @@
 #
 
 config PARTITION_MANAGER
-	default n if !BOARD_IS_NON_SECURE
+	default n if !((SOC_SERIES_NRF91 || SOC_SERIES_NRF53) && BOARD_IS_NON_SECURE)
 
 source "share/sysbuild/Kconfig"
diff --git a/samples/keys/hw_unique_key/boards/nrf54lv10dk_nrf54lv10a_cpuapp.conf b/samples/keys/hw_unique_key/boards/nrf54lv10dk_nrf54lv10a_cpuapp.conf
@@ -0,0 +1,7 @@
+# Copyright (c) 2026 Nordic Semiconductor ASA
+#
+# SPDX-License-Identifier: LicenseRef-Nordic-5-Clause
+
+CONFIG_MBEDTLS_PSA_CRYPTO_C=y
+CONFIG_MAIN_STACK_SIZE=4096
+CONFIG_MBEDTLS_ENABLE_HEAP=y
diff --git a/samples/keys/hw_unique_key/sample.yaml b/samples/keys/hw_unique_key/sample.yaml
@@ -18,10 +18,15 @@ common:
     - nrf52840dk/nrf52840
     - nrf21540dk/nrf52840
     - nrf54l15dk/nrf54l15/cpuapp
+    - nrf54l15dk/nrf54l15/cpuapp/ns
     - nrf54lm20dk/nrf54lm20a/cpuapp
     - nrf54lm20dk/nrf54lm20b/cpuapp
+    - nrf54lm20dk/nrf54lm20a/cpuapp/ns
+    - nrf54lm20dk/nrf54lm20b/cpuapp/ns
     - nrf54l15dk/nrf54l10/cpuapp
     - nrf54l15dk/nrf54l05/cpuapp
+    - nrf54lv10dk/nrf54lv10a/cpuapp
+    - nrf54lv10dk/nrf54lv10a/cpuapp/ns
   integration_platforms:
     - nrf5340dk/nrf5340/cpuapp
     - nrf5340dk/nrf5340/cpuapp/ns
@@ -34,10 +39,15 @@ common:
     - nrf52840dk/nrf52840
     - nrf21540dk/nrf52840
     - nrf54l15dk/nrf54l15/cpuapp
+    - nrf54l15dk/nrf54l15/cpuapp/ns
     - nrf54lm20dk/nrf54lm20a/cpuapp
     - nrf54lm20dk/nrf54lm20b/cpuapp
+    - nrf54lm20dk/nrf54lm20a/cpuapp/ns
+    - nrf54lm20dk/nrf54lm20b/cpuapp/ns
     - nrf54l15dk/nrf54l10/cpuapp
     - nrf54l15dk/nrf54l05/cpuapp
+    - nrf54lv10dk/nrf54lv10a/cpuapp
+    - nrf54lv10dk/nrf54lv10a/cpuapp/ns
   harness: console
   harness_config:
     type: multi_line
diff --git a/samples/tfm/tfm_hello_world/sample.yaml b/samples/tfm/tfm_hello_world/sample.yaml
@@ -64,6 +64,16 @@ tests:
       - ci_samples_tfm
     extra_args:
       - CONFIG_TFM_PROFILE_TYPE_NOT_SET=y
+    platform_allow:
+      - nrf54l15dk/nrf54l15/cpuapp/ns
+      - nrf54lv10dk/nrf54lv10a/cpuapp/ns
+      - nrf54lm20dk/nrf54lm20a/cpuapp/ns
+      - nrf54lm20dk/nrf54lm20b/cpuapp/ns
+    integration_platforms:
+      - nrf54l15dk/nrf54l15/cpuapp/ns
+      - nrf54lv10dk/nrf54lv10a/cpuapp/ns
+      - nrf54lm20dk/nrf54lm20a/cpuapp/ns
+      - nrf54lm20dk/nrf54lm20b/cpuapp/ns
   sample.tfm.hello_world.lvl2:
     sysbuild: true
     tags:
@@ -74,3 +84,13 @@ tests:
       - CONFIG_TFM_IPC=y
       - CONFIG_TFM_ISOLATION_LEVEL=2
       - CONFIG_TFM_PROFILE_TYPE_NOT_SET=y
+    platform_allow:
+      - nrf54l15dk/nrf54l15/cpuapp/ns
+      - nrf54lv10dk/nrf54lv10a/cpuapp/ns
+      - nrf54lm20dk/nrf54lm20a/cpuapp/ns
+      - nrf54lm20dk/nrf54lm20b/cpuapp/ns
+    integration_platforms:
+      - nrf54l15dk/nrf54l15/cpuapp/ns
+      - nrf54lv10dk/nrf54lv10a/cpuapp/ns
+      - nrf54lm20dk/nrf54lm20a/cpuapp/ns
+      - nrf54lm20dk/nrf54lm20b/cpuapp/ns
diff --git a/samples/tfm/tfm_secure_peripheral/sample.yaml b/samples/tfm/tfm_secure_peripheral/sample.yaml
@@ -11,11 +11,19 @@ common:
     - nrf9151dk/nrf9151/ns
     - nrf9160dk/nrf9160/ns
     - nrf9161dk/nrf9161/ns
+    - nrf54l15dk/nrf54l15/cpuapp/ns
+    - nrf54lm20dk/nrf54lm20b/cpuapp/ns
+    - nrf54lm20dk/nrf54lm20a/cpuapp/ns
+    - nrf54lv10dk/nrf54lv10a/cpuapp/ns
   integration_platforms:
     - nrf5340dk/nrf5340/cpuapp/ns
     - nrf9151dk/nrf9151/ns
     - nrf9160dk/nrf9160/ns
     - nrf9161dk/nrf9161/ns
+    - nrf54l15dk/nrf54l15/cpuapp/ns
+    - nrf54lm20dk/nrf54lm20b/cpuapp/ns
+    - nrf54lm20dk/nrf54lm20a/cpuapp/ns
+    - nrf54lv10dk/nrf54lv10a/cpuapp/ns
   harness: console
   harness_config:
     type: multi_line
diff --git a/samples/zephyr/tfm_integration/psa_protected_storage/CMakeLists.txt b/samples/zephyr/tfm_integration/psa_protected_storage/CMakeLists.txt
@@ -0,0 +1,17 @@
+#
+# Copyright (c) 2026 Nordic Semiconductor ASA
+#
+# SPDX-License-Identifier: Apache-2.0
+#
+
+cmake_minimum_required(VERSION 3.20.0)
+
+find_package(Zephyr REQUIRED HINTS $ENV{ZEPHYR_BASE})
+
+project(psa_protected_storage)
+
+target_sources(app PRIVATE ${ZEPHYR_BASE}/samples/tfm_integration/psa_protected_storage/src/main.c)
+
+target_include_directories(app PRIVATE
+  $<TARGET_PROPERTY:tfm,TFM_BINARY_DIR>/api_ns/interface/include
+)
diff --git a/samples/zephyr/tfm_integration/psa_protected_storage/Kconfig.sysbuild b/samples/zephyr/tfm_integration/psa_protected_storage/Kconfig.sysbuild
@@ -0,0 +1,10 @@
+#
+# Copyright (c) 2026 Nordic Semiconductor
+#
+# SPDX-License-Identifier: LicenseRef-Nordic-5-Clause
+#
+
+config PARTITION_MANAGER
+	default n if !((SOC_SERIES_NRF91 || SOC_SERIES_NRF53) && BOARD_IS_NON_SECURE)
+
+source "share/sysbuild/Kconfig"
diff --git a/samples/zephyr/tfm_integration/psa_protected_storage/prj.conf b/samples/zephyr/tfm_integration/psa_protected_storage/prj.conf
@@ -0,0 +1,8 @@
+#
+# Copyright (c) 2026 Nordic Semiconductor ASA
+#
+# SPDX-License-Identifier: Apache-2.0
+#
+
+CONFIG_BUILD_WITH_TFM=y
+CONFIG_TFM_PROFILE_TYPE_NOT_SET=y
diff --git a/samples/zephyr/tfm_integration/psa_protected_storage/sample.yaml b/samples/zephyr/tfm_integration/psa_protected_storage/sample.yaml
@@ -0,0 +1,32 @@
+sample:
+  description: Protected Storage API sample
+  name: PSA Protected Storage
+common:
+  tags: psa
+  platform_allow:
+    - nrf54l15dk/nrf54l15/cpuapp/ns
+    - nrf54lm20dk/nrf54lm20b/cpuapp/ns
+    - nrf54lm20dk/nrf54lm20a/cpuapp/ns
+    - nrf54lv10dk/nrf54lv10a/cpuapp/ns
+    - nrf5340dk/nrf5340/cpuapp/ns
+    - nrf9160dk/nrf9160/ns
+  harness: console
+  harness_config:
+    type: multi_line
+    regex:
+      - "Protected Storage sample started"
+      - "PSA Protected Storage API Version [0-9]*.[0-9]*"
+      - "Writing data to UID1: .*"
+      - "Info on data stored in UID1:"
+      - "- Size: [0-9]*"
+      - "- Capacity: 0x[0-9a-f]*"
+      - "- Flags: 0x[0-9-a-f]*"
+      - "Got expected error \\(PSA_ERROR_NOT_PERMITTED\\) when writing to protected\
+      \ UID"
+      - "Removing UID1"
+
+tests:
+  sample.tfm.protected_storage:
+    tags:
+      - trusted-firmware-m
+      - mcuboot
diff --git a/samples/zephyr/tfm_integration/tfm_ipc/CMakeLists.txt b/samples/zephyr/tfm_integration/tfm_ipc/CMakeLists.txt
@@ -0,0 +1,16 @@
+#
+# Copyright (c) 2026 Nordic Semiconductor ASA
+#
+# SPDX-License-Identifier: Apache-2.0
+
+cmake_minimum_required(VERSION 3.20.0)
+
+find_package(Zephyr REQUIRED HINTS $ENV{ZEPHYR_BASE})
+
+project(tfm_ipc)
+
+target_sources(app PRIVATE ${ZEPHYR_BASE}/samples/tfm_integration/tfm_ipc/src/main.c)
+
+target_include_directories(app PRIVATE
+  $<TARGET_PROPERTY:tfm,TFM_BINARY_DIR>/api_ns/interface/include
+)
diff --git a/samples/zephyr/tfm_integration/tfm_ipc/Kconfig.sysbuild b/samples/zephyr/tfm_integration/tfm_ipc/Kconfig.sysbuild
@@ -0,0 +1,10 @@
+#
+# Copyright (c) 2026 Nordic Semiconductor
+#
+# SPDX-License-Identifier: LicenseRef-Nordic-5-Clause
+#
+
+config PARTITION_MANAGER
+	default n if !((SOC_SERIES_NRF91 || SOC_SERIES_NRF53) && BOARD_IS_NON_SECURE)
+
+source "share/sysbuild/Kconfig"
diff --git a/samples/zephyr/tfm_integration/tfm_ipc/prj.conf b/samples/zephyr/tfm_integration/tfm_ipc/prj.conf
@@ -0,0 +1,16 @@
+#
+# Copyright (c) 2026 Nordic Semiconductor ASA
+#
+# SPDX-License-Identifier: Apache-2.0
+#
+
+CONFIG_BUILD_WITH_TFM=y
+CONFIG_TFM_PROFILE_TYPE_NOT_SET=y
+CONFIG_TFM_IPC=y
+CONFIG_REBOOT=y
+
+# The Zephyr CMSIS emulation assumes that ticks are ms, currently
+CONFIG_SYS_CLOCK_TICKS_PER_SEC=1000
+
+CONFIG_MAIN_STACK_SIZE=4096
+CONFIG_HEAP_MEM_POOL_SIZE=4096
diff --git a/samples/zephyr/tfm_integration/tfm_ipc/sample.yaml b/samples/zephyr/tfm_integration/tfm_ipc/sample.yaml
@@ -0,0 +1,45 @@
+sample:
+  description: This app provides an example of using TF-M on the secure side, with
+    Zephyr on the NS side, using IPC.
+  name: TF-M IPC example
+tests:
+  sample.tfm_ipc:
+    tags:
+      - introduction
+      - trusted-firmware-m
+      - mcuboot
+    platform_allow:
+      - nrf5340dk/nrf5340/cpuapp/ns
+      - nrf9160dk/nrf9160/ns
+      - nrf54l15dk/nrf54l15/cpuapp/ns
+      - nrf54lm20dk/nrf54lm20b/cpuapp/ns
+      - nrf54lm20dk/nrf54lm20a/cpuapp/ns
+      - nrf54lv10dk/nrf54lv10a/cpuapp/ns
+    harness: console
+    harness_config:
+      type: multi_line
+      regex:
+        - "TF-M IPC on .*"
+        - "The version of the PSA Framework API is"
+        - "The PSA Crypto service minor version is"
+        - "Generating 256 bytes of random data"
+  sample.tfm_ipc.no_bl2:
+    tags:
+      - introduction
+      - trusted-firmware-m
+    platform_allow:
+      - nrf54l15dk/nrf54l15/cpuapp/ns
+      - nrf54l15dk/nrf54l10/cpuapp/ns
+      - nrf54lm20dk/nrf54lm20a/cpuapp/ns
+      - nrf54lm20dk/nrf54lm20b/cpuapp/ns
+      - nrf54lv10dk/nrf54lv10a/cpuapp/ns
+    extra_configs:
+      - CONFIG_TFM_BL2=n
+    harness: console
+    harness_config:
+      type: multi_line
+      regex:
+        - "TF-M IPC on .*"
+        - "The version of the PSA Framework API is"
+        - "The PSA Crypto service minor version is"
+        - "Generating 256 bytes of random data"
diff --git a/samples/zephyr/tfm_integration/tfm_secure_partition/CMakeLists.txt b/samples/zephyr/tfm_integration/tfm_secure_partition/CMakeLists.txt
@@ -0,0 +1,49 @@
+#
+# Copyright (c) 2026 Nordic Semiconductor ASA
+#
+# SPDX-License-Identifier: Apache-2.0
+#
+
+cmake_minimum_required(VERSION 3.20.0)
+
+find_package(Zephyr REQUIRED HINTS $ENV{ZEPHYR_BASE})
+
+set(source_dir ${ZEPHYR_BASE}/samples/tfm_integration/tfm_secure_partition)
+
+get_target_property(TFM_BINARY_DIR tfm TFM_BINARY_DIR)
+configure_file(
+  ${source_dir}/dummy_partition/tfm_manifest_list.yaml.in
+  ${CMAKE_CURRENT_BINARY_DIR}/dummy_partition/tfm_manifest_list.yaml
+)
+
+if(CONFIG_TFM_IPC)
+  set(SPM_BACKEND "IPC")
+else()
+  set(SPM_BACKEND "SFN")
+endif()
+
+configure_file(
+  ${source_dir}/dummy_partition/tfm_dummy_partition.yaml.in
+  ${CMAKE_CURRENT_BINARY_DIR}/dummy_partition/tfm_dummy_partition.yaml
+)
+
+set_property(TARGET zephyr_property_target
+  APPEND PROPERTY TFM_CMAKE_OPTIONS
+  -DTFM_EXTRA_MANIFEST_LIST_FILES=${CMAKE_CURRENT_BINARY_DIR}/dummy_partition/tfm_manifest_list.yaml
+  -DTFM_EXTRA_PARTITION_PATHS=${source_dir}/dummy_partition
+)
+
+project(tfm_secure_partition)
+
+target_sources(app PRIVATE
+  ${source_dir}/src/main.c
+  ${source_dir}/src/dummy_partition.c
+)
+
+target_include_directories(app PRIVATE
+  $<TARGET_PROPERTY:tfm,TFM_BINARY_DIR>/api_ns/interface/include
+)
+
+target_compile_definitions(app
+  PRIVATE TFM_PARTITION_DUMMY_PARTITION
+)
diff --git a/samples/zephyr/tfm_integration/tfm_secure_partition/Kconfig.sysbuild b/samples/zephyr/tfm_integration/tfm_secure_partition/Kconfig.sysbuild
@@ -0,0 +1,10 @@
+#
+# Copyright (c) 2026 Nordic Semiconductor
+#
+# SPDX-License-Identifier: LicenseRef-Nordic-5-Clause
+#
+
+config PARTITION_MANAGER
+	default n if !((SOC_SERIES_NRF91 || SOC_SERIES_NRF53) && BOARD_IS_NON_SECURE)
+
+source "share/sysbuild/Kconfig"
diff --git a/samples/zephyr/tfm_integration/tfm_secure_partition/prj.conf b/samples/zephyr/tfm_integration/tfm_secure_partition/prj.conf
@@ -0,0 +1,9 @@
+#
+# Copyright (c) 2026 Nordic Semiconductor ASA
+#
+# SPDX-License-Identifier: Apache-2.0
+#
+
+CONFIG_BUILD_WITH_TFM=y
+CONFIG_TFM_PROFILE_TYPE_NOT_SET=y
+CONFIG_TFM_CONNECTION_BASED_SERVICE_API=y
diff --git a/samples/zephyr/tfm_integration/tfm_secure_partition/sample.yaml b/samples/zephyr/tfm_integration/tfm_secure_partition/sample.yaml
@@ -0,0 +1,31 @@
+common:
+  tags:
+    - trusted-firmware-m
+    - mcuboot
+  platform_allow:
+    - nrf54l15dk/nrf54l15/cpuapp/ns
+    - nrf54lm20dk/nrf54lm20b/cpuapp/ns
+    - nrf54lm20dk/nrf54lm20a/cpuapp/ns
+    - nrf54lv10dk/nrf54lv10a/cpuapp/ns
+    - nrf5340dk/nrf5340/cpuapp/ns
+    - nrf9160dk/nrf9160/ns
+  harness: console
+  harness_config:
+    type: multi_line
+    regex:
+      - "Digest: be45cb2605bf36bebde684841a28f0fd43c69850a3dce5fedba69928ee3a8991"
+      - "Digest: 1452c8f04245d355722fdbfb03c69bcfd380b7dff911a3e425013397251f6a4e"
+      - "Digest: d3b4349010abb691b9584b6fd6b41ec54596ef7b98d853fb4f5bfa690f50f222"
+      - "Digest: 5afbcfede855ca834ff5b4e8a44a32206a51381f3cf52f5001a3241f017ac41a"
+      - "Digest: 983318380c325099da63de2e7ca57c1630693b28b4754e08817533295dbfcfbb"
+      - "No valid secret for key, received expected error code"
+sample:
+  name: "TFM Secure Partition Sample"
+
+tests:
+  sample.tfm.secure_partition.ipc:
+    extra_configs:
+      - CONFIG_TFM_IPC=y
+  sample.tfm.secure_partition.sfn:
+    extra_configs:
+      - CONFIG_TFM_SFN=y
diff --git a/tests/lib/hw_unique_key_tfm/Kconfig.sysbuild b/tests/lib/hw_unique_key_tfm/Kconfig.sysbuild
@@ -0,0 +1,10 @@
+#
+# Copyright (c) 2026 Nordic Semiconductor
+#
+# SPDX-License-Identifier: LicenseRef-Nordic-5-Clause
+#
+
+config PARTITION_MANAGER
+	default n if !((SOC_SERIES_NRF91 || SOC_SERIES_NRF53) && BOARD_IS_NON_SECURE)
+
+source "share/sysbuild/Kconfig"
diff --git a/tests/lib/hw_unique_key_tfm/testcase.yaml b/tests/lib/hw_unique_key_tfm/testcase.yaml
diff --git a/tests/zephyr/modules/tf-m/regression/Kconfig.sysbuild b/tests/zephyr/modules/tf-m/regression/Kconfig.sysbuild
diff --git a/tests/zephyr/modules/tf-m/regression/boards/nrf54lm20dk_nrf54lm20a_cpuapp_ns.conf b/tests/zephyr/modules/tf-m/regression/boards/nrf54lm20dk_nrf54lm20a_cpuapp_ns.conf
diff --git a/tests/zephyr/modules/tf-m/regression/boards/nrf54lm20dk_nrf54lm20b_cpuapp_ns.conf b/tests/zephyr/modules/tf-m/regression/boards/nrf54lm20dk_nrf54lm20b_cpuapp_ns.conf
diff --git a/tests/zephyr/modules/tf-m/regression/testcase.yaml b/tests/zephyr/modules/tf-m/regression/testcase.yaml

Original file line number	Diff line number	Diff line change
`@@ -5,6 +5,6 @@`
`5`	`5`	`#`
`6`	`6`
`7`	`7`	`config PARTITION_MANAGER`
`8`		`- default n if !BOARD_IS_NON_SECURE`
	`8`	`+ default n if !((SOC_SERIES_NRF91 \|\| SOC_SERIES_NRF53) && BOARD_IS_NON_SECURE)`
`9`	`9`
`10`	`10`	`source "share/sysbuild/Kconfig"`