Skip to content

Commit be4d6a8

Browse files
fallbergtekka007
authored andcommitted
Add fuse chapter to signing troubleshooting (#1369)
1 parent 3fff954 commit be4d6a8

File tree

1 file changed

+11
-0
lines changed

1 file changed

+11
-0
lines changed

core/MySigning.h

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -892,5 +892,16 @@ int signerMemcmp(const void* a, const void* b, size_t sz);
892892
* Also, if whitelisting is used, make sure the proper serial is paired with the proper node ID at the destination.
893893
* Whitelisting preferences are communicated with the signing presentation (done automatically from nodes to gateway but
894894
* has to be explicitly done by sketch for node to node communication). @see signerPresentation
895+
*
896+
* @subsection MySigningTroubleshootingSymptomStTampered Signing backend reports tampered even after personalization
897+
*
898+
* The signing backend validates that the secure elements in EEPROM remain unmodified after personalization using a checksum. If the check fails,
899+
* the backend reports
900+
* @code
901+
* !SGN:PER:Tampered
902+
* @endcode
903+
* This usually indicate that the sketch has modified the secure elements in EEPROM, but if you experience this even after a node is freshly
904+
* personalized on a atmega device, it could be that the EESAVE fuse bit is not set which mean that the EEPROM is erased when a new firmware is flashed.
905+
* You will need to enable the EESAVE bit in order to have the security personalization persist in the node.
895906
*/
896907
/** @}*/

0 commit comments

Comments
 (0)