Skip to content

Commit e90b0a1

Browse files
committed
sysbuild: mcuboot: Clarify monotonic counter usage
Clarifies that monotonic hardware counter will only be used on the first image and disallow usage of this feature with QSPI XIP split image updates as it is not compatible Signed-off-by: Jamie McCrae <[email protected]>
1 parent c8add17 commit e90b0a1

File tree

1 file changed

+5
-0
lines changed

1 file changed

+5
-0
lines changed

sysbuild/Kconfig.mcuboot

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,10 +16,15 @@ menuconfig MCUBOOT_HARDWARE_DOWNGRADE_PREVENTION
1616
bool "Downgrade prevention using hardware security counters"
1717
depends on (SOC_NRF5340_CPUAPP || SOC_SERIES_NRF91X)
1818
depends on !SECURE_BOOT_APPCORE
19+
depends on !QSPI_XIP_SPLIT_IMAGE
1920
help
2021
This option can be enabled by the application and will ensure that the
2122
MCUBOOT_HW_DOWNGRADE_PREVENTION Kconfig option is enabled in the MCUboot image.
2223

24+
Note that this can only be used on first image, it will not be applied to the second
25+
image (network core updates) on nRF5340 which will use software downgrade protection
26+
on the network core CPU instead.
27+
2328
if MCUBOOT_HARDWARE_DOWNGRADE_PREVENTION
2429

2530
config MCUBOOT_HW_DOWNGRADE_PREVENTION_COUNTER_SLOTS

0 commit comments

Comments
 (0)