Skip to content

Conversation

@de-nordic
Copy link
Contributor

Add key locking when KMU is used.

@de-nordic de-nordic requested review from a team as code owners July 4, 2025 13:24
@github-actions github-actions bot added manifest changelog-entry-required Update changelog before merge. Remove label if entry is not needed or already added. labels Jul 4, 2025
@NordicBuilder
Copy link
Contributor

NordicBuilder commented Jul 4, 2025

The following west manifest projects have changed revision in this Pull Request:

Name Old Revision New Revision Diff
mcuboot nrfconnect/sdk-mcuboot@7b333ff nrfconnect/sdk-mcuboot@b6b46a7 (main) nrfconnect/[email protected]

All manifest checks OK

Note: This message is automatically posted and updated by the Manifest GitHub Action.

@NordicBuilder
Copy link
Contributor

NordicBuilder commented Jul 4, 2025

CI Information

To view the history of this post, clich the 'edited' button above
Build number: 26

Inputs:

Sources:

sdk-nrf: PR head: 862a6b2f995acf5dc220c2ef4f7be12eb31028ad
mcuboot: PR head: b6b46a782d503cc52b41672e096fb526daaac31c

more details

sdk-nrf:

PR head: 862a6b2f995acf5dc220c2ef4f7be12eb31028ad
merge base: 0fd3d0d2c0e8896f183a930dccb50f0acbf1b287
target head (main): 02439b1d88e65078e6deac33277b0b6b5e447041
Diff

mcuboot:

PR head: b6b46a782d503cc52b41672e096fb526daaac31c
merge base: 7b333ffd5ba2d01b731f528f2be89864abbf7ca3
Diff

Github labels

Enabled Name Description
ci-disabled Disable the ci execution
ci-all-test Run all of ci, no test spec filtering will be done
ci-force-downstream Force execution of downstream even if twister fails
ci-run-twister Force run twister
ci-run-zephyr-twister Force run zephyr twister
List of changed files detected by CI (14)
bootloader
│  ├── mcuboot
│  │  ├── boot
│  │  │  ├── bootutil
│  │  │  │  ├── src
│  │  │  │  │  │ ed25519_psa.c
│  │  │  │  ├── zephyr
│  │  │  │  │  ├── src
│  │  │  │  │  │  │ boot_request_retention.c
│  │  │  ├── zephyr
│  │  │  │  ├── include
│  │  │  │  │  │ nrf_cleanup.h
│  │  │  │  │ main.c
tests
│  ├── subsys
│  │  ├── kmu
│  │  │  ├── pytest
│  │  │  │  │ test_kmu_revoke_in_app.py
│  │  │  ├── revoke
│  │  │  │  ├── CMakeLists.txt
│  │  │  │  ├── boards
│  │  │  │  │  ├── nrf54lm20dk_nrf54lm20a_cpuapp.conf
│  │  │  │  │  │ nrf54lv10dk_nrf54lv10a_cpuapp.conf
│  │  │  │  ├── prj.conf
│  │  │  │  ├── src
│  │  │  │  │  │ main.c
│  │  │  │  ├── sysbuild.conf
│  │  │  │  ├── sysbuild
│  │  │  │  │  │ mcuboot.conf
│  │  │  │  │ testcase.yaml
west.yml

Outputs:

Toolchain

Version:
Build docker image:

Test Spec & Results: ✅ Success; ❌ Failure; 🟠 Queued; 🟡 Progress; ◻️ Skipped; ⚠️ Quarantine

  • ◻️ Toolchain
  • ◻️ Build twister
  • ◻️ Integration tests
    • ◻️ test-sdk-mcuboot
Disabled integration tests
    • test-fw-nrfconnect-nrf_lrcs_mosh
    • test-fw-nrfconnect-nrf_lrcs_positioning
    • desktop52_verification
    • doc-internal
    • test_ble_nrf_config
    • test-fw-nrfconnect-apps
    • test-fw-nrfconnect-ble_mesh
    • test-fw-nrfconnect-ble_samples
    • test-fw-nrfconnect-chip
    • test-fw-nrfconnect-fem
    • test-fw-nrfconnect-nfc
    • test-fw-nrfconnect-nrf-iot_libmodem-nrf
    • test-fw-nrfconnect-nrf-iot_lwm2m
    • test-fw-nrfconnect-nrf-iot_samples
    • test-fw-nrfconnect-nrf-iot_serial_lte_modem
    • test-fw-nrfconnect-nrf-iot_thingy91
    • test-fw-nrfconnect-nrf-iot_zephyr_lwm2m
    • test-fw-nrfconnect-nrf_crypto
    • test-fw-nrfconnect-proprietary_esb
    • test-fw-nrfconnect-ps-main
    • test-fw-nrfconnect-rpc
    • test-fw-nrfconnect-rs
    • test-fw-nrfconnect-tfm
    • test-fw-nrfconnect-thread-main
    • test-low-level
    • test-sdk-audio
    • test-sdk-dfu
    • test-sdk-find-my
    • test-sdk-pmic-samples
    • test-sdk-wifi
    • test-secdom-samples-public

Note: This message is automatically posted and updated by the CI

@github-actions
Copy link

github-actions bot commented Jul 4, 2025

You can find the documentation preview for this PR here.

@de-nordic de-nordic force-pushed the key-locking branch 2 times, most recently from 94675c0 to 2468b8e Compare August 1, 2025 14:19
@de-nordic de-nordic requested a review from a team August 1, 2025 14:19
@de-nordic de-nordic force-pushed the key-locking branch 2 times, most recently from 3fa2c5f to c56706d Compare August 6, 2025 16:33
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

remove also this file

@de-nordic de-nordic force-pushed the key-locking branch 7 times, most recently from 421b44b to 1deb869 Compare September 9, 2025 08:27
@de-nordic de-nordic force-pushed the key-locking branch 5 times, most recently from 038dbbc to 8e85a7b Compare September 12, 2025 10:22
@de-nordic de-nordic requested a review from gchwier September 12, 2025 11:58
KMU key-locking support.

Signed-off-by: Dominik Ermel <[email protected]>
With MCUboot locking the keys it is no longer possible to revoke,
or destroy, MCUboot keys from application.

Signed-off-by: Dominik Ermel <[email protected]>
@NordicBuilder NordicBuilder removed the DNM label Sep 12, 2025
@de-nordic de-nordic merged commit a41dcce into nrfconnect:main Sep 12, 2025
14 of 15 checks passed
@de-nordic de-nordic deleted the key-locking branch September 12, 2025 14:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

changelog-entry-required Update changelog before merge. Remove label if entry is not needed or already added. manifest manifest-mcuboot

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants