diff --git a/applications/blinky/tests/corstone300_pass_output.log b/applications/blinky/tests/corstone300_pass_output.log
index f2e98cf..17606a6 100644
--- a/applications/blinky/tests/corstone300_pass_output.log
+++ b/applications/blinky/tests/corstone300_pass_output.log
@@ -1,6 +1,6 @@
 Waiting for provisioning bundle
 Running provisioning bundle
-Booting TF-M v2.2.0
+Booting TF-M v2.2.1
 psa_framework_version is: 257
 LED on
 LED off
diff --git a/applications/blinky/tests/corstone310_pass_output.log b/applications/blinky/tests/corstone310_pass_output.log
index f2e98cf..17606a6 100644
--- a/applications/blinky/tests/corstone310_pass_output.log
+++ b/applications/blinky/tests/corstone310_pass_output.log
@@ -1,6 +1,6 @@
 Waiting for provisioning bundle
 Running provisioning bundle
-Booting TF-M v2.2.0
+Booting TF-M v2.2.1
 psa_framework_version is: 257
 LED on
 LED off
diff --git a/applications/blinky/tests/corstone315_pass_output.log b/applications/blinky/tests/corstone315_pass_output.log
index b6d2211..8e17d80 100644
--- a/applications/blinky/tests/corstone315_pass_output.log
+++ b/applications/blinky/tests/corstone315_pass_output.log
@@ -1,6 +1,6 @@
 Waiting for DM provisioning bundle
 Running DM provisioning bundle
-Booting TF-M v2.2.0
+Booting TF-M v2.2.1
 psa_framework_version is: 257
 LED on
 LED off
diff --git a/applications/blinky/tests/corstone320_pass_output.log b/applications/blinky/tests/corstone320_pass_output.log
index b6d2211..8e17d80 100644
--- a/applications/blinky/tests/corstone320_pass_output.log
+++ b/applications/blinky/tests/corstone320_pass_output.log
@@ -1,6 +1,6 @@
 Waiting for DM provisioning bundle
 Running DM provisioning bundle
-Booting TF-M v2.2.0
+Booting TF-M v2.2.1
 psa_framework_version is: 257
 LED on
 LED off
diff --git a/applications/keyword_detection/tests/corstone300_model_pass_output.log b/applications/keyword_detection/tests/corstone300_model_pass_output.log
index 8c07c2b..66f6b22 100644
--- a/applications/keyword_detection/tests/corstone300_model_pass_output.log
+++ b/applications/keyword_detection/tests/corstone300_model_pass_output.log
@@ -1,12 +1,12 @@
 Waiting for provisioning bundle
 Running provisioning bundle
-Secure Component (ID 0) version=2.2.0
+Secure Component (ID 0) version=2.2.1
 Non-Secure Component (ID 1) version=0.0.10
 ML Model Component (ID 2) version=0.0.11
 Starting bootloader
-Booting TF-M v2.2.0
+Booting TF-M v2.2.1
 PSA Framework version is: 257
-Secure Component (ID 0) version=2.2.0
+Secure Component (ID 0) version=2.2.1
 Non-Secure Component (ID 1) version=0.0.10
 ML Model Component (ID 2) version=0.0.42
 ML interface initialised
diff --git a/applications/keyword_detection/tests/corstone300_pass_output.log b/applications/keyword_detection/tests/corstone300_pass_output.log
index 69b63b8..87554bf 100644
--- a/applications/keyword_detection/tests/corstone300_pass_output.log
+++ b/applications/keyword_detection/tests/corstone300_pass_output.log
@@ -1,11 +1,11 @@
 Waiting for provisioning bundle
 Running provisioning bundle
-Secure Component (ID 0) version=2.2.0
+Secure Component (ID 0) version=2.2.1
 Non-Secure Component (ID 1) version=0.0.10
 Starting bootloader
-Booting TF-M v2.2.0
+Booting TF-M v2.2.1
 PSA Framework version is: 257
-Secure Component (ID 0) version=2.2.0
+Secure Component (ID 0) version=2.2.1
 Non-Secure Component (ID 1) version=0.0.20
 ML interface initialised
 ML_HEARD_ON
diff --git a/applications/keyword_detection/tests/corstone310_model_pass_output.log b/applications/keyword_detection/tests/corstone310_model_pass_output.log
index 8c07c2b..66f6b22 100644
--- a/applications/keyword_detection/tests/corstone310_model_pass_output.log
+++ b/applications/keyword_detection/tests/corstone310_model_pass_output.log
@@ -1,12 +1,12 @@
 Waiting for provisioning bundle
 Running provisioning bundle
-Secure Component (ID 0) version=2.2.0
+Secure Component (ID 0) version=2.2.1
 Non-Secure Component (ID 1) version=0.0.10
 ML Model Component (ID 2) version=0.0.11
 Starting bootloader
-Booting TF-M v2.2.0
+Booting TF-M v2.2.1
 PSA Framework version is: 257
-Secure Component (ID 0) version=2.2.0
+Secure Component (ID 0) version=2.2.1
 Non-Secure Component (ID 1) version=0.0.10
 ML Model Component (ID 2) version=0.0.42
 ML interface initialised
diff --git a/applications/keyword_detection/tests/corstone310_pass_output.log b/applications/keyword_detection/tests/corstone310_pass_output.log
index 69b63b8..87554bf 100644
--- a/applications/keyword_detection/tests/corstone310_pass_output.log
+++ b/applications/keyword_detection/tests/corstone310_pass_output.log
@@ -1,11 +1,11 @@
 Waiting for provisioning bundle
 Running provisioning bundle
-Secure Component (ID 0) version=2.2.0
+Secure Component (ID 0) version=2.2.1
 Non-Secure Component (ID 1) version=0.0.10
 Starting bootloader
-Booting TF-M v2.2.0
+Booting TF-M v2.2.1
 PSA Framework version is: 257
-Secure Component (ID 0) version=2.2.0
+Secure Component (ID 0) version=2.2.1
 Non-Secure Component (ID 1) version=0.0.20
 ML interface initialised
 ML_HEARD_ON
diff --git a/applications/keyword_detection/tests/corstone315_model_pass_output.log b/applications/keyword_detection/tests/corstone315_model_pass_output.log
index 8677730..5475410 100644
--- a/applications/keyword_detection/tests/corstone315_model_pass_output.log
+++ b/applications/keyword_detection/tests/corstone315_model_pass_output.log
@@ -1,12 +1,12 @@
 Waiting for DM provisioning bundle
 Running DM provisioning bundle
-Secure Component (ID 0) version=2.2.0
+Secure Component (ID 0) version=2.2.1
 Non-Secure Component (ID 1) version=0.0.10
 ML Model Component (ID 2) version=0.0.11
 Starting bootloader
-Booting TF-M v2.2.0
+Booting TF-M v2.2.1
 PSA Framework version is: 257
-Secure Component (ID 0) version=2.2.0
+Secure Component (ID 0) version=2.2.1
 Non-Secure Component (ID 1) version=0.0.10
 ML Model Component (ID 2) version=0.0.42
 ML interface initialised
diff --git a/applications/keyword_detection/tests/corstone315_pass_output.log b/applications/keyword_detection/tests/corstone315_pass_output.log
index e9945b5..c7aed8b 100644
--- a/applications/keyword_detection/tests/corstone315_pass_output.log
+++ b/applications/keyword_detection/tests/corstone315_pass_output.log
@@ -1,11 +1,11 @@
 Waiting for DM provisioning bundle
 Running DM provisioning bundle
-Secure Component (ID 0) version=2.2.0
+Secure Component (ID 0) version=2.2.1
 Non-Secure Component (ID 1) version=0.0.10
 Starting bootloader
-Booting TF-M v2.2.0
+Booting TF-M v2.2.1
 PSA Framework version is: 257
-Secure Component (ID 0) version=2.2.0
+Secure Component (ID 0) version=2.2.1
 Non-Secure Component (ID 1) version=0.0.20
 ML interface initialised
 ML_HEARD_ON
diff --git a/applications/keyword_detection/tests/corstone320_model_pass_output.log b/applications/keyword_detection/tests/corstone320_model_pass_output.log
index 8677730..5475410 100644
--- a/applications/keyword_detection/tests/corstone320_model_pass_output.log
+++ b/applications/keyword_detection/tests/corstone320_model_pass_output.log
@@ -1,12 +1,12 @@
 Waiting for DM provisioning bundle
 Running DM provisioning bundle
-Secure Component (ID 0) version=2.2.0
+Secure Component (ID 0) version=2.2.1
 Non-Secure Component (ID 1) version=0.0.10
 ML Model Component (ID 2) version=0.0.11
 Starting bootloader
-Booting TF-M v2.2.0
+Booting TF-M v2.2.1
 PSA Framework version is: 257
-Secure Component (ID 0) version=2.2.0
+Secure Component (ID 0) version=2.2.1
 Non-Secure Component (ID 1) version=0.0.10
 ML Model Component (ID 2) version=0.0.42
 ML interface initialised
diff --git a/applications/keyword_detection/tests/corstone320_pass_output.log b/applications/keyword_detection/tests/corstone320_pass_output.log
index e9945b5..c7aed8b 100644
--- a/applications/keyword_detection/tests/corstone320_pass_output.log
+++ b/applications/keyword_detection/tests/corstone320_pass_output.log
@@ -1,11 +1,11 @@
 Waiting for DM provisioning bundle
 Running DM provisioning bundle
-Secure Component (ID 0) version=2.2.0
+Secure Component (ID 0) version=2.2.1
 Non-Secure Component (ID 1) version=0.0.10
 Starting bootloader
-Booting TF-M v2.2.0
+Booting TF-M v2.2.1
 PSA Framework version is: 257
-Secure Component (ID 0) version=2.2.0
+Secure Component (ID 0) version=2.2.1
 Non-Secure Component (ID 1) version=0.0.20
 ML interface initialised
 ML_HEARD_ON
diff --git a/applications/object_detection/tests/corstone300_pass_output.log b/applications/object_detection/tests/corstone300_pass_output.log
index 923030b..9b5f527 100644
--- a/applications/object_detection/tests/corstone300_pass_output.log
+++ b/applications/object_detection/tests/corstone300_pass_output.log
@@ -1,11 +1,11 @@
 Waiting for provisioning bundle
 Running provisioning bundle
-Secure Component (ID 0) version=2.2.0
+Secure Component (ID 0) version=2.2.1
 Non-Secure Component (ID 1) version=0.0.10
 Starting bootloader
-Booting TF-M v2.2.0
+Booting TF-M v2.2.1
 PSA Framework version is: 257
-Secure Component (ID 0) version=2.2.0
+Secure Component (ID 0) version=2.2.1
 Non-Secure Component (ID 1) version=0.0.20
 Complete recognition: Detected faces: 2
 Complete recognition: Detected faces: 2
diff --git a/applications/object_detection/tests/corstone310_pass_output.log b/applications/object_detection/tests/corstone310_pass_output.log
index 923030b..9b5f527 100644
--- a/applications/object_detection/tests/corstone310_pass_output.log
+++ b/applications/object_detection/tests/corstone310_pass_output.log
@@ -1,11 +1,11 @@
 Waiting for provisioning bundle
 Running provisioning bundle
-Secure Component (ID 0) version=2.2.0
+Secure Component (ID 0) version=2.2.1
 Non-Secure Component (ID 1) version=0.0.10
 Starting bootloader
-Booting TF-M v2.2.0
+Booting TF-M v2.2.1
 PSA Framework version is: 257
-Secure Component (ID 0) version=2.2.0
+Secure Component (ID 0) version=2.2.1
 Non-Secure Component (ID 1) version=0.0.20
 Complete recognition: Detected faces: 2
 Complete recognition: Detected faces: 2
diff --git a/applications/object_detection/tests/corstone315_pass_output.log b/applications/object_detection/tests/corstone315_pass_output.log
index d53cb12..14d8eac 100644
--- a/applications/object_detection/tests/corstone315_pass_output.log
+++ b/applications/object_detection/tests/corstone315_pass_output.log
@@ -1,11 +1,11 @@
 Waiting for DM provisioning bundle
 Running DM provisioning bundle
-Secure Component (ID 0) version=2.2.0
+Secure Component (ID 0) version=2.2.1
 Non-Secure Component (ID 1) version=0.0.10
 Starting bootloader
-Booting TF-M v2.2.0
+Booting TF-M v2.2.1
 PSA Framework version is: 257
-Secure Component (ID 0) version=2.2.0
+Secure Component (ID 0) version=2.2.1
 Non-Secure Component (ID 1) version=0.0.20
 Complete recognition: Detected faces: 2
 Complete recognition: Detected faces: 2
diff --git a/applications/object_detection/tests/corstone320_pass_output.log b/applications/object_detection/tests/corstone320_pass_output.log
index d53cb12..14d8eac 100644
--- a/applications/object_detection/tests/corstone320_pass_output.log
+++ b/applications/object_detection/tests/corstone320_pass_output.log
@@ -1,11 +1,11 @@
 Waiting for DM provisioning bundle
 Running DM provisioning bundle
-Secure Component (ID 0) version=2.2.0
+Secure Component (ID 0) version=2.2.1
 Non-Secure Component (ID 1) version=0.0.10
 Starting bootloader
-Booting TF-M v2.2.0
+Booting TF-M v2.2.1
 PSA Framework version is: 257
-Secure Component (ID 0) version=2.2.0
+Secure Component (ID 0) version=2.2.1
 Non-Secure Component (ID 1) version=0.0.20
 Complete recognition: Detected faces: 2
 Complete recognition: Detected faces: 2
diff --git a/applications/speech_recognition/tests/corstone300_pass_output.log b/applications/speech_recognition/tests/corstone300_pass_output.log
index 05f293c..c93842c 100644
--- a/applications/speech_recognition/tests/corstone300_pass_output.log
+++ b/applications/speech_recognition/tests/corstone300_pass_output.log
@@ -1,11 +1,11 @@
 Waiting for provisioning bundle
 Running provisioning bundle
-Secure Component (ID 0) version=2.2.0
+Secure Component (ID 0) version=2.2.1
 Non-Secure Component (ID 1) version=0.0.10
 Starting bootloader
-Booting TF-M v2.2.0
+Booting TF-M v2.2.1
 PSA Framework version is: 257
-Secure Component (ID 0) version=2.2.0
+Secure Component (ID 0) version=2.2.1
 Non-Secure Component (ID 1) version=0.0.20
 Init speex
 ML interface initialised
diff --git a/applications/speech_recognition/tests/corstone310_pass_output.log b/applications/speech_recognition/tests/corstone310_pass_output.log
index 05f293c..c93842c 100644
--- a/applications/speech_recognition/tests/corstone310_pass_output.log
+++ b/applications/speech_recognition/tests/corstone310_pass_output.log
@@ -1,11 +1,11 @@
 Waiting for provisioning bundle
 Running provisioning bundle
-Secure Component (ID 0) version=2.2.0
+Secure Component (ID 0) version=2.2.1
 Non-Secure Component (ID 1) version=0.0.10
 Starting bootloader
-Booting TF-M v2.2.0
+Booting TF-M v2.2.1
 PSA Framework version is: 257
-Secure Component (ID 0) version=2.2.0
+Secure Component (ID 0) version=2.2.1
 Non-Secure Component (ID 1) version=0.0.20
 Init speex
 ML interface initialised
diff --git a/applications/speech_recognition/tests/corstone315_pass_output.log b/applications/speech_recognition/tests/corstone315_pass_output.log
index b7db7e0..1925872 100644
--- a/applications/speech_recognition/tests/corstone315_pass_output.log
+++ b/applications/speech_recognition/tests/corstone315_pass_output.log
@@ -1,11 +1,11 @@
 Waiting for DM provisioning bundle
 Running DM provisioning bundle
-Secure Component (ID 0) version=2.2.0
+Secure Component (ID 0) version=2.2.1
 Non-Secure Component (ID 1) version=0.0.10
 Starting bootloader
-Booting TF-M v2.2.0
+Booting TF-M v2.2.1
 PSA Framework version is: 257
-Secure Component (ID 0) version=2.2.0
+Secure Component (ID 0) version=2.2.1
 Non-Secure Component (ID 1) version=0.0.20
 Init speex
 ML interface initialised
diff --git a/applications/speech_recognition/tests/corstone320_pass_output.log b/applications/speech_recognition/tests/corstone320_pass_output.log
index b7db7e0..1925872 100644
--- a/applications/speech_recognition/tests/corstone320_pass_output.log
+++ b/applications/speech_recognition/tests/corstone320_pass_output.log
@@ -1,11 +1,11 @@
 Waiting for DM provisioning bundle
 Running DM provisioning bundle
-Secure Component (ID 0) version=2.2.0
+Secure Component (ID 0) version=2.2.1
 Non-Secure Component (ID 1) version=0.0.10
 Starting bootloader
-Booting TF-M v2.2.0
+Booting TF-M v2.2.1
 PSA Framework version is: 257
-Secure Component (ID 0) version=2.2.0
+Secure Component (ID 0) version=2.2.1
 Non-Secure Component (ID 1) version=0.0.20
 Init speex
 ML interface initialised
diff --git a/components/security/trusted_firmware-m/library b/components/security/trusted_firmware-m/library
index dd2b7de..2d91588 160000
--- a/components/security/trusted_firmware-m/library
+++ b/components/security/trusted_firmware-m/library
@@ -1 +1 @@
-Subproject commit dd2b7de197742beeebd12197c14d9d3cb1b9ec68
+Subproject commit 2d91588b14ba2138e05beb1d0685302e68c05fb1
diff --git a/docs/applications/blinky.md b/docs/applications/blinky.md
index 0d54472..663b829 100644
--- a/docs/applications/blinky.md
+++ b/docs/applications/blinky.md
@@ -45,9 +45,9 @@ To run the blinky example, run the following command:
 [INF] Image index: 1, Swap type: none
 [INF] Image index: 0, Swap type: none
 [INF] Bootloader chainload address offset: 0x0
-[INF] Image version: v2.2.0
+[INF] Image version: v2.2.1
 [INF] Jumping to the first image slot
-Booting TF-M v2.2.0+gdd2b7de
+Booting TF-M v2.2.1+gdd2b7de
 <NUL>[Sec Thread] Secure image initializing!
 <NUL>TF-M Float ABI: Hard
 <NUL>Lazy stacking enabled
diff --git a/docs/applications/keyword_detection.md b/docs/applications/keyword_detection.md
index 7103bb0..22c69aa 100644
--- a/docs/applications/keyword_detection.md
+++ b/docs/applications/keyword_detection.md
@@ -100,9 +100,9 @@ To run the Keyword-Detection example, run the following command:
 [INF] Boot source: primary slot
 [INF] Image index: 0, Swap type: none
 [INF] Bootloader chainload address offset: 0x0
-[INF] Image version: v2.2.0
+[INF] Image version: v2.2.1
 [INF] Jumping to the first image slot
-Booting TF-M v2.2.0+gdd2b7de
+Booting TF-M v2.2.1+gdd2b7de
 <NUL>[Sec Thread] Secure image initializing!
 <NUL>TF-M Float ABI: Hard
 <NUL>Lazy stacking enabled
@@ -115,7 +115,7 @@ To run the Keyword-Detection example, run the following command:
 3 0 [IP-Task] prvCloseDHCPSocket[44-21]: closed, user count 0
 4 23 [BLINK_TASK ] [INFO] Blink task started
 5 27 [OTA Task] [INFO] OTA over MQTT, firmware versions:
-6 33 [OTA Task] [INFO] Secure Component (ID 0) version=2.2.0
+6 33 [OTA Task] [INFO] Secure Component (ID 0) version=2.2.1
 7 40 [OTA Task] [INFO] Non-Secure Component (ID 1) version=0.0.20
 8 1000 [IP-Task] DHCP-socket[44-21]: DHCP Socket Create
 9 1000 [IP-Task] prvCreateDHCPSocket[44-21]: open, user count 1
@@ -233,9 +233,9 @@ Follow the instructions described in the [Firmware update with AWS](./aws_iot/aw
 [INF] Boot source: primary slot
 [INF] Image index: 0, Swap type: none
 [INF] Bootloader chainload address offset: 0x0
-[INF] Image version: v2.2.0
+[INF] Image version: v2.2.1
 [INF] Jumping to the first image slot
-Booting TF-M v2.2.0+gdd2b7de
+Booting TF-M v2.2.1+gdd2b7de
 <NUL>[Sec Thread] Secure image initializing!
 <NUL>TF-M Float ABI: Hard
 <NUL>Lazy stacking enabled
@@ -253,7 +253,7 @@ Creating an empty PS flash layout.
 6 0 [IP-Task] prvCloseDHCPSocket[44-21]: closed, user count 0
 7 38 [BLINK_TASK ] [INFO] Blink task started
 8 42 [OTA Task] [INFO] OTA over MQTT, firmware versions:
-9 48 [OTA Task] [INFO] Secure Component (ID 0) version=2.2.0
+9 48 [OTA Task] [INFO] Secure Component (ID 0) version=2.2.1
 10 55 [OTA Task] [INFO] Non-Secure Component (ID 1) version=0.0.10
 11 1000 [IP-Task] DHCP-socket[44-21]: DHCP Socket Create
 12 1000 [IP-Task] prvCreateDHCPSocket[44-21]: open, user count 1
@@ -317,9 +317,9 @@ Creating an empty PS flash layout.
 [INF] Boot source: primary slot
 [INF] Image index: 0, Swap type: none
 [INF] Bootloader chainload address offset: 0x0
-[INF] Image version: v2.2.0
+[INF] Image version: v2.2.1
 [INF] Jumping to the first image slot
-Booting TF-M v2.2.0+gdd2b7de
+Booting TF-M v2.2.1+gdd2b7de
 <NUL>[Sec Thread] Secure image initializing!
 <NUL>TF-M Float ABI: Hard
 <NUL>Lazy stacking enabled
@@ -332,7 +332,7 @@ Creating an empty PS flash layout.
 3 0 [IP-Task] prvCloseDHCPSocket[44-21]: closed, user count 0
 4 23 [BLINK_TASK ] [INFO] Blink task started
 5 27 [OTA Task] [INFO] OTA over MQTT, firmware versions:
-6 33 [OTA Task] [INFO] Secure Component (ID 0) version=2.2.0
+6 33 [OTA Task] [INFO] Secure Component (ID 0) version=2.2.1
 7 40 [OTA Task] [INFO] Non-Secure Component (ID 1) version=0.0.20
 ```
 
diff --git a/docs/applications/object_detection.md b/docs/applications/object_detection.md
index 3fc08e8..9114831 100644
--- a/docs/applications/object_detection.md
+++ b/docs/applications/object_detection.md
@@ -74,9 +74,9 @@ Check [Device Provisioning](./device_provisioning/device_provisioning.md) for de
 [INF] Boot source: primary slot
 [INF] Image index: 0, Swap type: none
 [INF] Bootloader chainload address offset: 0x0
-[INF] Image version: v2.2.0
+[INF] Image version: v2.2.1
 [INF] Jumping to the first image slot
-Booting TF-M v2.2.0+gdd2b7de
+Booting TF-M v2.2.1+gdd2b7de
 <NUL>[Sec Thread] Secure image initializing!
 <NUL>TF-M Float ABI: Hard
 <NUL>Lazy stacking enabled
@@ -89,7 +89,7 @@ Check [Device Provisioning](./device_provisioning/device_provisioning.md) for de
 3 0 [IP-Task] vIPSetDHCP_RATimerEnableState: Off
 4 0 [IP-Task] prvCloseDHCPSocket[44-21]: closed, user count 0
 5 27 [OTA Task] [INFO] OTA over MQTT, firmware versions:
-6 33 [OTA Task] [INFO] Secure Component (ID 0) version=2.2.0
+6 33 [OTA Task] [INFO] Secure Component (ID 0) version=2.2.1
 7 40 [OTA Task] [INFO] Non-Secure Component (ID 1) version=0.0.20
 8 47 [ML_TASK] [INFO] ML Task start
 9 51 [BLINK_TASK ] [INFO] Blink task started
@@ -353,9 +353,9 @@ Follow the instructions described in the [Firmware update with AWS](./aws_iot/aw
 [INF] Boot source: primary slot
 [INF] Image index: 0, Swap type: none
 [INF] Bootloader chainload address offset: 0x0
-[INF] Image version: v2.2.0
+[INF] Image version: v2.2.1
 [INF] Jumping to the first image slot
-Booting TF-M v2.2.0+gdd2b7de
+Booting TF-M v2.2.1+gdd2b7de
 <NUL>[Sec Thread] Secure image initializing!
 <NUL>TF-M Float ABI: Hard
 <NUL>Lazy stacking enabled
@@ -373,7 +373,7 @@ Creating an empty PS flash layout.
 6 0 [IP-Task] vIPSetDHCP_RATimerEnableState: Off
 7 0 [IP-Task] prvCloseDHCPSocket[44-21]: closed, user count 0
 8 43 [OTA Task] [INFO] OTA over MQTT, firmware versions:
-9 49 [OTA Task] [INFO] Secure Component (ID 0) version=2.2.0
+9 49 [OTA Task] [INFO] Secure Component (ID 0) version=2.2.1
 10 55 [OTA Task] [INFO] Non-Secure Component (ID 1) version=0.0.10
 11 62 [ML_TASK] [INFO] ML Task start
 12 66 [BLINK_TASK ] [INFO] Blink task started
@@ -473,9 +473,9 @@ Creating an empty PS flash layout.
 [INF] Boot source: primary slot
 [INF] Image index: 0, Swap type: none
 [INF] Bootloader chainload address offset: 0x0
-[INF] Image version: v2.2.0
+[INF] Image version: v2.2.1
 [INF] Jumping to the first image slot
-Booting TF-M v2.2.0+gdd2b7de
+Booting TF-M v2.2.1+gdd2b7de
 <NUL>[Sec Thread] Secure image initializing!
 <NUL>TF-M Float ABI: Hard
 <NUL>Lazy stacking enabled
@@ -488,6 +488,6 @@ Creating an empty PS flash layout.
 3 0 [IP-Task] vIPSetDHCP_RATimerEnableState: Off
 4 0 [IP-Task] prvCloseDHCPSocket[44-21]: closed, user count 0
 5 27 [OTA Task] [INFO] OTA over MQTT, firmware versions:
-6 33 [OTA Task] [INFO] Secure Component (ID 0) version=2.2.0
+6 33 [OTA Task] [INFO] Secure Component (ID 0) version=2.2.1
 7 40 [OTA Task] [INFO] Non-Secure Component (ID 1) version=0.0.20
 ```
diff --git a/docs/applications/speech_recognition.md b/docs/applications/speech_recognition.md
index d3f8cee..a565372 100644
--- a/docs/applications/speech_recognition.md
+++ b/docs/applications/speech_recognition.md
@@ -78,9 +78,9 @@ To run the Speech-Recognition example, run the following command:
 [INF] Boot source: primary slot
 [INF] Image index: 0, Swap type: none
 [INF] Bootloader chainload address offset: 0x0
-[INF] Image version: v2.2.0
+[INF] Image version: v2.2.1
 [INF] Jumping to the first image slot
-Booting TF-M v2.2.0+gdd2b7de
+Booting TF-M v2.2.1+gdd2b7de
 <NUL>[Sec Thread] Secure image initializing!
 <NUL>TF-M Float ABI: Hard
 <NUL>Lazy stacking enabled
@@ -92,7 +92,7 @@ To run the Speech-Recognition example, run the following command:
 2 0 [IP-Task] vIPSetDHCP_RATimerEnableState: Off
 3 0 [IP-Task] prvCloseDHCPSocket[44-21]: closed, user count 0
 4 23 [OTA Task] [INFO] OTA over MQTT, firmware versions:
-5 29 [OTA Task] [INFO] Secure Component (ID 0) version=2.2.0
+5 29 [OTA Task] [INFO] Secure Component (ID 0) version=2.2.1
 6 35 [OTA Task] [INFO] Non-Secure Component (ID 1) version=0.0.20
 7 42 [ML_TASK] [INFO] ML Task start
 8 46 [DSP_TASK] [INFO] DSP Task start
@@ -217,9 +217,9 @@ Follow the instructions described in the [Firmware update with AWS](./aws_iot/aw
 [INF] Boot source: primary slot
 [INF] Image index: 0, Swap type: none
 [INF] Bootloader chainload address offset: 0x0
-[INF] Image version: v2.2.0
+[INF] Image version: v2.2.1
 [INF] Jumping to the first image slot
-Booting TF-M v2.2.0+gdd2b7de
+Booting TF-M v2.2.1+gdd2b7de
 <NUL>[Sec Thread] Secure image initializing!
 <NUL>TF-M Float ABI: Hard
 <NUL>Lazy stacking enabled
@@ -236,7 +236,7 @@ Creating an empty PS flash layout.
 5 0 [IP-Task] vIPSetDHCP_RATimerEnableState: Off
 6 0 [IP-Task] prvCloseDHCPSocket[44-21]: closed, user count 0
 7 38 [OTA Task] [INFO] OTA over MQTT, firmware versions:
-8 44 [OTA Task] [INFO] Secure Component (ID 0) version=2.2.0
+8 44 [OTA Task] [INFO] Secure Component (ID 0) version=2.2.1
 9 50 [OTA Task] [INFO] Non-Secure Component (ID 1) version=0.0.10
 10 57 [ML_TASK] [INFO] ML Task start
 11 61 [DSP_TASK] [INFO] DSP Task start
@@ -304,9 +304,9 @@ Creating an empty PS flash layout.
 [INF] Boot source: primary slot
 [INF] Image index: 0, Swap type: none
 [INF] Bootloader chainload address offset: 0x0
-[INF] Image version: v2.2.0
+[INF] Image version: v2.2.1
 [INF] Jumping to the first image slot
-Booting TF-M v2.2.0+gdd2b7de
+Booting TF-M v2.2.1+gdd2b7de
 <NUL>[Sec Thread] Secure image initializing!
 <NUL>TF-M Float ABI: Hard
 <NUL>Lazy stacking enabled
@@ -318,6 +318,6 @@ Creating an empty PS flash layout.
 2 0 [IP-Task] vIPSetDHCP_RATimerEnableState: Off
 3 0 [IP-Task] prvCloseDHCPSocket[44-21]: closed, user count 0
 4 23 [OTA Task] [INFO] OTA over MQTT, firmware versions:
-5 29 [OTA Task] [INFO] Secure Component (ID 0) version=2.2.0
+5 29 [OTA Task] [INFO] Secure Component (ID 0) version=2.2.1
 6 35 [OTA Task] [INFO] Non-Secure Component (ID 1) version=0.0.20
 ```
diff --git a/manifest.yml b/manifest.yml
index fa1696b..2d2d50d 100644
--- a/manifest.yml
+++ b/manifest.yml
@@ -25,7 +25,7 @@ dependencies:
     license: "BSD-3-Clause"
     tpip-category: "category-2"
     security-risk: "high"
-    version: "TF-Mv2.2.0"
+    version: "TF-Mv2.2.1"
     repository:
       type: "git"
       url: "https://git.trustedfirmware.org/TF-M/trusted-firmware-m.git"
diff --git a/release_changes/202508041002.change.md b/release_changes/202508041002.change.md
new file mode 100644
index 0000000..e160f2d
--- /dev/null
+++ b/release_changes/202508041002.change.md
@@ -0,0 +1 @@
+components: Bump TF-M to v2.2.1 release.