ab_split: Enable HW downgrade protection

tomchy · tomchy · commit 5e0239c45c34 · 2025-11-27T14:14:37.000+01:00
Enable HW-based downgrade protection inside the A/B sample with split
slots.

Ref: NCSDK-36359

Signed-off-by: Tomasz Chyrowicz &lt;tomasz.chyrowicz@nordicsemi.no&gt;
diff --git a/samples/dfu/ab_split/sysbuild.conf b/samples/dfu/ab_split/sysbuild.conf
@@ -13,3 +13,6 @@ SB_CONFIG_MCUBOOT_SIGN_MERGED_BINARY=n
 
 # Enable manifest-based updates
 SB_CONFIG_MCUBOOT_MANIFEST_UPDATES=y
+
+# Enable HW-based rollback protection
+SB_CONFIG_MCUBOOT_HARDWARE_DOWNGRADE_PREVENTION=y
diff --git a/samples/dfu/ab_split/sysbuild/mcuboot/prj.conf b/samples/dfu/ab_split/sysbuild/mcuboot/prj.conf
@@ -36,3 +36,8 @@ CONFIG_RETENTION=y
 CONFIG_BOOT_SHARE_DATA=y
 CONFIG_BOOT_SHARE_DATA_BOOTINFO=y
 CONFIG_BOOT_SHARE_BACKEND_RETENTION=y
+
+# Enable IronSide service
+CONFIG_NRF_IRONSIDE_COUNTER_SERVICE=y
+# Enable MCUboot counter implementation that uses IronSide counters
+CONFIG_NRF_MCUBOOT_IRONSIDE_COUNTERS=y
