Skip to content

Commit 83fae2e

Browse files
committed
doc: nrf: config: bootloaders: downgrade: Update Kconfig for sysbuild
Updates usage of a Kconfig for sysbuild Signed-off-by: Jamie McCrae <[email protected]>
1 parent 238590f commit 83fae2e

File tree

1 file changed

+11
-16
lines changed

1 file changed

+11
-16
lines changed

doc/nrf/config_and_build/bootloaders/bootloader_downgrade_protection.rst

Lines changed: 11 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -29,10 +29,10 @@ Software-based downgrade protection
2929
The |NCS| supports MCUboot's software-based downgrade prevention for application images, using semantic versioning.
3030
This feature offers protection against any outdated firmware that is uploaded to a device.
3131

32-
To enable this feature, set the MCUboot-specific configuration options ``CONFIG_MCUBOOT_DOWNGRADE_PREVENTION`` and ``CONFIG_BOOT_UPGRADE_ONLY`` for the MCUboot image.
32+
To enable this feature, set the configuration option :kconfig:option:`CONFIG_MCUBOOT_DOWNGRADE_PREVENTION` for the MCUboot image and :kconfig:option:`SB_CONFIG_MCUBOOT_MODE_OVERWRITE_ONLY` for sysbuild.
3333

3434
.. caution::
35-
Enabling ``CONFIG_BOOT_UPGRADE_ONLY`` prevents the fallback recovery of application images.
35+
Enabling :kconfig:option:`SB_CONFIG_MCUBOOT_MODE_OVERWRITE_ONLY` prevents the fallback recovery of application images.
3636
Consult its Kconfig description and the :doc:`MCUboot Design documentation <mcuboot:design>` for more information on how to use it.
3737

3838
You can compile your application with this feature as follows:
@@ -41,10 +41,10 @@ You can compile your application with this feature as follows:
4141
:class: highlight
4242
4343
west build -b *board_target* *application* -- \\
44-
-DCONFIG_BOOTLOADER_MCUBOOT=y \\
44+
-DSB_CONFIG_BOOTLOADER_MCUBOOT=y \\
45+
-DSB_CONFIG_MCUBOOT_MODE_OVERWRITE_ONLY=y \\
4546
-DCONFIG_MCUBOOT_IMGTOOL_SIGN_VERSION=\\"0.1.2\\+3\\" \\
46-
-Dmcuboot_CONFIG_MCUBOOT_DOWNGRADE_PREVENTION=y \\
47-
-Dmcuboot_CONFIG_BOOT_UPGRADE_ONLY=y
47+
-Dmcuboot_CONFIG_MCUBOOT_DOWNGRADE_PREVENTION=y
4848
4949
|how_to_configure|
5050

@@ -82,27 +82,22 @@ Downgrade protection using |NSIB|
8282

8383
.. bootloader_monotonic_counter_nsib_start
8484
85-
To enable anti-rollback protection with monotonic counter for |NSIB|, set the following configurations in the application (parent image):
86-
87-
* :kconfig:option:`CONFIG_SB_MONOTONIC_COUNTER`
88-
* :kconfig:option:`CONFIG_SB_NUM_VER_COUNTER_SLOTS`
85+
To enable anti-rollback protection with monotonic counter for |NSIB|, set the following configurations in the ``b0`` image: :kconfig:option:`CONFIG_SB_MONOTONIC_COUNTER` and :kconfig:option:`CONFIG_SB_NUM_VER_COUNTER_SLOTS`
8986

9087
Special handling is needed when updating the S1 variant of an image when :ref:`ug_bootloader_adding_upgradable`.
9188
See :ref:`ug_bootloader_adding_presigned_variants` for details.
9289

9390
.. bootloader_monotonic_counter_nsib_end
9491
95-
To set options for child images, see the :ref:`ug_multi_image_variables` section.
92+
To set options for other images, see :ref:`zephyr:sysbuild_kconfig_namespacing`.
9693

9794
.. _ug_fw_update_hw_downgrade_mcuboot:
9895

9996
Downgrade protection using MCUboot
10097
==================================
10198

102-
To enable anti-rollback protection with monotonic counter for MCUboot, set the following configurations in the application (parent image):
103-
104-
* :kconfig:option:`CONFIG_MCUBOOT_HARDWARE_DOWNGRADE_PREVENTION`
105-
* :kconfig:option:`CONFIG_MCUBOOT_HW_DOWNGRADE_PREVENTION_COUNTER_SLOTS`
106-
* :kconfig:option:`CONFIG_MCUBOOT_HW_DOWNGRADE_PREVENTION_COUNTER_VALUE`
99+
To enable anti-rollback protection with monotonic counter for MCUboot, set the following configurations using sysbuild:
107100

108-
To set options for child images, see the :ref:`ug_multi_image_variables` section.
101+
* :kconfig:option:`SB_CONFIG_MCUBOOT_HARDWARE_DOWNGRADE_PREVENTION`
102+
* :kconfig:option:`SB_CONFIG_MCUBOOT_HW_DOWNGRADE_PREVENTION_COUNTER_SLOTS`
103+
* :kconfig:option:`SB_CONFIG_MCUBOOT_HW_DOWNGRADE_PREVENTION_COUNTER_VALUE`

0 commit comments

Comments
 (0)