[nrf noup] boot: add support for loading PERIPHCONF

Add support required to load the application's global domain
peripheral configuration (PERIPHCONF) from MCUboot after
the initial PERIPHCONF loaded by IronSide before MCUboot was booted.

When this feature is enabled, PERIPHCONF sections in each image will
remain in the firmware binary, and the signing scripts generate custom
TLV metadata which lets MCUboot know where the PERIPHCONF is located in
the firmware.

MCUboot then loads the parameters from the TLVs and asks IronSide
SE to apply them. Since MCUboot/the Application core can lose access
to the global peripherals happens after loading the new PERIPHCONF,
the call is placed after MCUboot's peripheral deinitialization.

The feature depends on a newly added IronSide SE API to work.
The API is supported from IronSide SE v23.3.0+26.

Signed-off-by: Jonathan Nilsen <jonathan.nilsen@nordicsemi.no>

Author: jonathannilsen

boot/bootutil/src/image_validate.c

@@ -64,6 +64,10 @@ BOOT_LOG_MODULE_DECLARE(mcuboot);
 #endif
 #include "bootutil_priv.h"
 
+#if defined(CONFIG_NCS_MCUBOOT_LOAD_PERIPHCONF)
+#include <load_ironside_se_conf.h>
+#endif
+
 /*
  * Currently, we only support being able to verify one type of
  * signature, because there is a single verification function that we
@@ -217,7 +221,8 @@ bootutil_img_validate(struct boot_loader_state *state,
 #if (defined(EXPECTED_KEY_TLV) && defined(MCUBOOT_HW_KEY)) || \
     (defined(EXPECTED_SIG_TLV) && defined(MCUBOOT_BUILTIN_KEY)) || \
     defined(MCUBOOT_HW_ROLLBACK_PROT) || defined(MCUBOOT_MANIFEST_UPDATES) || \
-    defined(MCUBOOT_UUID_VID) || defined(MCUBOOT_UUID_CID) || defined(MCUBOOT_DECOMPRESS_IMAGES)
+    defined(MCUBOOT_UUID_VID) || defined(MCUBOOT_UUID_CID) || defined(MCUBOOT_DECOMPRESS_IMAGES) ||\
+    defined(CONFIG_NCS_MCUBOOT_LOAD_PERIPHCONF)
     int image_index = (state == NULL ? 0 : BOOT_CURR_IMG(state));
 #endif
     uint32_t off;
@@ -266,6 +271,8 @@ bootutil_img_validate(struct boot_loader_state *state,
 #ifdef MCUBOOT_MANIFEST_UPDATES
     bool manifest_found = false;
     bool manifest_valid = false;
+#endif
+#if defined(MCUBOOT_MANIFEST_UPDATES) || defined(CONFIG_NCS_MCUBOOT_LOAD_PERIPHCONF)
     uint8_t slot = (flash_area_get_id(fap) == FLASH_AREA_IMAGE_SECONDARY(image_index) ? 1 : 0);
 #endif
 #ifdef MCUBOOT_UUID_VID
@@ -735,6 +742,20 @@ bootutil_img_validate(struct boot_loader_state *state,
             uuid_cid_valid = fih_rc;
             break;
         }
+#endif
+#if defined(CONFIG_NCS_MCUBOOT_LOAD_PERIPHCONF)
+        default:
+        {
+            /* Validate custom/vendor TLVs. */
+            rc = nrf_validate_custom_tlv_data(hdr, fap, boot_img_slot_off(state, slot),
+                                              type, off, len);
+            if (rc) {
+                BOOT_LOG_ERR("Slot %d image %d has invalid custom TLV data, error %d",
+                             slot, image_index, rc);
+                goto out;
+            }
+            break;
+        }
 #endif
         }
     }

boot/bootutil/src/loader.c

@@ -84,6 +84,10 @@ int pcd_version_cmp_net(const struct flash_area *fap, struct image_header *hdr);
 #include "bootutil/key_revocation.h"
 #endif
 
+#if defined(CONFIG_NCS_MCUBOOT_LOAD_PERIPHCONF)
+#include <load_ironside_se_conf.h>
+#endif
+
 #ifdef CONFIG_SOC_EARLY_RESET_HOOK
 void s2ram_designate_slot(uint8_t slot);
 #endif
@@ -2420,6 +2424,15 @@ context_boot_go(struct boot_loader_state *state, struct boot_rsp *rsp)
             FIH_SET(fih_rc, FIH_FAILURE);
             goto out;
         }
+
+#if defined(CONFIG_NCS_MCUBOOT_LOAD_PERIPHCONF)
+        rc = nrf_add_custom_tlv_data(state, BOOT_SLOT_PRIMARY);
+        if (rc != 0) {
+            FIH_SET(fih_rc, FIH_FAILURE);
+            goto out;
+        }
+#endif
+
         ++fih_cnt;
     }
     /*
@@ -2921,6 +2934,14 @@ context_boot_go(struct boot_loader_state *state, struct boot_rsp *rsp)
             FIH_SET(fih_rc, FIH_FAILURE);
             goto close;
         }
+
+#if defined(CONFIG_NCS_MCUBOOT_LOAD_PERIPHCONF)
+        rc = nrf_add_custom_tlv_data(state, state->slot_usage[BOOT_CURR_IMG(state)].active_slot);
+        if (rc != 0) {
+            FIH_SET(fih_rc, FIH_FAILURE);
+            goto close;
+        }
+#endif
     }
 
 #ifdef CONFIG_SOC_EARLY_RESET_HOOK

boot/bootutil/src/loader_manifest_xip.c

@@ -60,6 +60,10 @@
 #include "bootutil/enc_key.h"
 #endif
 
+#if defined(CONFIG_NCS_MCUBOOT_LOAD_PERIPHCONF)
+#include <load_ironside_se_conf.h>
+#endif
+
 BOOT_LOG_MODULE_DECLARE(mcuboot);
 
 static struct boot_loader_state boot_data;
@@ -613,6 +617,15 @@ context_boot_go(struct boot_loader_state *state, struct boot_rsp *rsp)
             FIH_SET(fih_rc, FIH_FAILURE);
             goto close;
         }
+
+#if defined(CONFIG_NCS_MCUBOOT_LOAD_PERIPHCONF)
+        rc = nrf_add_custom_tlv_data(state,
+                                     state->slot_usage[BOOT_CURR_IMG(state)].active_slot);
+        if (rc != 0) {
+            FIH_SET(fih_rc, FIH_FAILURE);
+            goto close;
+        }
+#endif
     }
 
     /* All image loaded successfully. */

boot/zephyr/CMakeLists.txt

@@ -808,6 +808,10 @@ zephyr_library_sources(
 )
 endif()
 
+if(CONFIG_NCS_MCUBOOT_LOAD_PERIPHCONF)
+  zephyr_sources(${BOOT_DIR}/zephyr/load_ironside_se_conf.c)
+endif()
+
 if(SYSBUILD AND CONFIG_PCD_APP)
     # Sysbuild requires details of the RAM flash device are stored to the cache of MCUboot so
     # that they can be read when running partition manager

boot/zephyr/include/load_ironside_se_conf.h

@@ -0,0 +1,37 @@
+/*
+ * Copyright (c) 2026 Nordic Semiconductor ASA
+ *
+ * SPDX-License-Identifier: LicenseRef-Nordic-5-Clause
+ */
+
+#ifndef H_LOAD_IRONSIDE_SE_CONF_
+#define H_LOAD_IRONSIDE_SE_CONF_
+
+#include <stdint.h>
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+struct boot_loader_state;
+struct image_header;
+struct flash_area;
+
+/* Validate custom TLVs containing configuration metadata. */
+int nrf_validate_custom_tlv_data(const struct image_header *hdr, const struct flash_area *fap,
+				 uint32_t slot_off, uint16_t tlv_type, uint32_t tlv_off,
+				 uint16_t tlv_len);
+
+/* Add parameters from custom TLVs containing configuration metadata
+ * for the active slot. The parameters added here are loaded using the nrf_load_* functions.
+ */
+int nrf_add_custom_tlv_data(struct boot_loader_state *state, int slot);
+
+/* Configure peripherals using parameters loaded from PERIPHCONF TLVs. */
+int nrf_load_periphconf(void);
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* H_LOAD_IRONSIDE_SE_CONF_ */