[TF-M] How to use my own keys to sign my images?

[Axeld56]

Hi,

I'm using the b_u585i_iot02a and I'm currently working on TF-M. I'd like to use my own keys to sign both my secure and my non secure images.
I'm using CONFIG_TFM_KEY_FILE_S and CONFIG_TFM_KEY_FILE_NS to specify my private keys and it result in this error: "Unable to fing bootable image" which is expected because mcuboot doesn't contain the corresponding public keys.

From my understanding, the public keys that will verify the signature should be in the keys.c file (in the tf-m repository). But those keys will be used only if MCUBOOT_HW_KEY and MCUBOOT_BUILTIN_KEY are not defined.

Is that right or am I missing something? And if so, how can I undefined MCUBOOT_HW_KEY and MCUBOOT_BUILTIN_KEY?

Thank you,

Axel

[JarmouniA]

Cc @tomi-font

[tomi-font]

don't know, no experience with this 🤷 I suggest you ask this in the Zephyr discord, TF-M channel, you are more likely to get answers there.