You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The |NCS| supports MCUboot's software-based downgrade prevention for application images, using semantic versioning.
30
30
This feature offers protection against any outdated firmware that is uploaded to a device.
31
31
32
-
To enable this feature, set the MCUboot-specific configuration options ``CONFIG_MCUBOOT_DOWNGRADE_PREVENTION`` and ``CONFIG_BOOT_UPGRADE_ONLY`` for the MCUboot image.
32
+
To enable this feature, set the configuration option :kconfig:option:`CONFIG_MCUBOOT_DOWNGRADE_PREVENTION`for the MCUboot image and :kconfig:option:`SB_CONFIG_MCUBOOT_MODE_OVERWRITE_ONLY` for sysbuild.
33
33
34
34
.. caution::
35
-
Enabling ``CONFIG_BOOT_UPGRADE_ONLY`` prevents the fallback recovery of application images.
35
+
Enabling :kconfig:option:`SB_CONFIG_MCUBOOT_MODE_OVERWRITE_ONLY` prevents the fallback recovery of application images.
36
36
Consult its Kconfig description and the :doc:`MCUboot Design documentation <mcuboot:design>` for more information on how to use it.
37
37
38
38
You can compile your application with this feature as follows:
@@ -41,10 +41,10 @@ You can compile your application with this feature as follows:
To enable anti-rollback protection with monotonic counter for |NSIB|, set the following configurations in the ``b0`` image: :kconfig:option:`CONFIG_SB_MONOTONIC_COUNTER` and :kconfig:option:`CONFIG_SB_NUM_VER_COUNTER_SLOTS`
89
86
90
87
Special handling is needed when updating the S1 variant of an image when :ref:`ug_bootloader_adding_upgradable`.
91
88
See :ref:`ug_bootloader_adding_presigned_variants` for details.
92
89
93
90
.. bootloader_monotonic_counter_nsib_end
94
91
95
-
To set options for child images, see the :ref:`ug_multi_image_variables` section.
92
+
To set options for other images, see :ref:`zephyr:sysbuild_kconfig_namespacing`.
96
93
97
94
.. _ug_fw_update_hw_downgrade_mcuboot:
98
95
99
96
Downgrade protection using MCUboot
100
97
==================================
101
98
102
-
To enable anti-rollback protection with monotonic counter for MCUboot, set the following configurations in the application (parent image):
0 commit comments