Skip to content

Commit c76fc47

Browse files
doc: nrf-bm: app_dev: dfu: Add details on mcuboot image config file
Add details on how to configure the MCUboot image by adding a sysbuild/mcuboot.conf file to the application directory. Signed-off-by: Eivind Jølsgard <[email protected]>
1 parent f4e9d12 commit c76fc47

File tree

1 file changed

+9
-1
lines changed

1 file changed

+9
-1
lines changed

doc/nrf-bm/app_dev/dfu/bootloader_keys.rst

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -43,6 +43,8 @@ Using a key in a project
4343
************************
4444

4545
Once a key has been generated, it can be used in a project by setting the :kconfig:option:`SB_CONFIG_BM_BOOTLOADER_MCUBOOT_SIGNATURE_KEY_FILE` sysbuild Kconfig option to the absolute path of the generated ``.pem`` key file.
46+
For most of the samples, you must create a :file:`sysbuild.conf` file in your application directory and add the sysbuild configuation here.
47+
You can also provide the sysbuild Kconfig option during compilation.
4648

4749
.. _ug_bootloader_kmu:
4850

@@ -78,7 +80,9 @@ MCUboot can invalidate image verification keys through the ``CONFIG_BOOT_KEYS_RE
7880
Enable this option during the MCUboot build process if there is a risk that images signed with a compromised key might contain critical vulnerabilities.
7981
The revocation of keys is triggered when both the firmware loader and SoftDevice are using a newer key.
8082

81-
Number of available key slots is set by ``CONFIG_BOOT_SIGNATURE_KMU_SLOTS`` Kconfig option. These slots has to be properly provisioned. For more information refer to `Performing KMU provisioning`_.
83+
The number of available key slots is set by the ``CONFIG_BOOT_SIGNATURE_KMU_SLOTS`` Kconfig option.
84+
These slots have to be properly provisioned.
85+
For more information refer to `Performing KMU provisioning`_.
8286

8387
.. caution::
8488
You must enable the ``CONFIG_BOOT_KEYS_REVOCATION`` Kconfig option when creating your project.
@@ -87,3 +91,7 @@ Number of available key slots is set by ``CONFIG_BOOT_SIGNATURE_KMU_SLOTS`` Kcon
8791

8892
A valid signature verification must precede any key invalidation.
8993
The last remaining key cannot be invalidated.
94+
95+
To enable the Kconfig options for the MCUboot image, edit the :file:`sysbuild/mcuboot.conf` file in your application directory.
96+
For most of the samples, you must create the :file:`sysbuild` folder and the :file:`sysbuild/mcuboot.conf` file must be created.
97+
This file applies to the MCUboot image only and is edited the same way as the :file:`prj.conf` file is used for your application image.

0 commit comments

Comments
 (0)