Flashing signed image on KW45 via vFlash

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Flashing signed image on KW45 via vFlash

305 Views
sshrivastava
Contributor II

Hi All,

I'm working on custom PCB which has kw45. I would like to flash the signed image via Vector Vflash. I have generated signed image file via NXP's Over the Air Programming tool, and it generates .sb3 file.  Below are the steps followed to generate sb3 file

below are the steps:

  1. Selected OTA protocol as OTAP Bluetooth LE
  2. Processor kw45
  3. Select the bin/s19 file, selected application core
  4. Used the encryption key described in sb3kdk.txt
  5. I have used JSON file configurator as described in below image
  6. sshrivastava_0-1725629266281.png
  7. Replaced our keys in Keys_and_certs folder
  8. I have used below configuration for JSON for creating sb3 container
  9. sshrivastava_1-1725629265744.png

     

  10. After this two windows pop out that shows authentication key and encryption keys.
  11. In the last, it generates .sb3 file.

After that, I have used srec_cat tool to convert .sb3 file to .bin file(supported by Vflash). I can successfully transfer the .bin file via vFlash to KW45. After system on reset, ROM Bootloader could not decrypt signed image. Rom Bootloader has also updated FW Update status to 0x4412d283 which means as per RM "Indicates failure to process sb3 file
OR failure to erase/write update status to OTACFG page". Could you please help to solve this issue. 

I'm using sdk version 2.12.7.

 

One more question, is there any way to verify and decrypt the downloaded image from the flash. I saw some nBoot api's but couldn't find any example? Could you please provide an example if you have.

Regards

Shivam

KW45 

0 Kudos
Reply
3 Replies

273 Views
EduardoZamora
NXP TechSupport
NXP TechSupport

Hello @sshrivastava

I am not able to see the full images you shared; however, the overall process looks ok according to AN13860 for creating the FW Update image using OTAP Tool.

I understand that you are using some third-party tools, but please consider that our support is limited to the usage of our recommended Software Tools. For image provisioning, I will recommend you using MCUXpresso Secure Provisioning Tool, a GUI application provided to simplify generation and provisioning of bootable executables on NXP devices, supporting Secure Binary bootable files.

Regards,
Eduardo.

0 Kudos
Reply

209 Views
sshrivastava
Contributor II

Hi,

1. I'm having issue with Secure Provisioning tool, my application starts from location 0x40000, when I add srec file, I get error in Secure Provisioning tool. Please refer the image below. Could you please let me know how to fix that.

 

sshrivastava_0-1726140695282.png

 

2. Secure provisioning tool generates secure bootable in sb format, but I want in hex or bin file so that I can flash via vFlash, could you share your opinion to achieve that.

 

Regards

Shivam

0 Kudos
Reply

196 Views
EduardoZamora
NXP TechSupport
NXP TechSupport

Hi,

Could you please kindly clarify why would your image start on that address? As shown in the SPT window, the software is expecting an offset in target memory = 0x0000.

Please, consult the MCUXpresso Secure Provisioning Tool User Guide for more information on the tool usage. Build image is described in Section 5.2. Also, KW45 workflow is shown in Section 6.7

Regarding the file format, my apologies, there is no tool I could recommend you for that purpose.

Regards,
Eduardo.

0 Kudos
Reply