Skip to main content
Associate II
March 6, 2024
Solved

Create SFI with own NS app, Secure Manager, and OBKs for STM32H573

  • March 6, 2024
  • 2 replies
  • 1247 views

So, I want to modify provisioning.bat and/or XML files to create an SFI that contains our developed non-secure app instead of default one, Secure Manager, and the various (especially DA one) OBKs.
This will then be downloaded into factory-fresh (only STiRoT and STuRoT installed) STM32H573-based custom boards via ST-Link/V3.
Note: at the end should be in CLOSED product state


Our project dir is a little different from the SMAK directory layout:

 

  • <project_root_dir>
    •  Binary
      • appli.bin
      • appli_enc_sign.bin
      • appli_enc_sign.hex
    • ROT_Provisioning    (basically copied from SMAK)
      • DA
      • SM
      • STiROT

         

This topic has been closed for replies.
Best answer by amolina-nxt

I found what I was looking for to replace the appli_0.hex (SMAK default app) with our non-secure FW app:

 

set appli_valid=--firmware "%projectdir%Binary\appli_!nb_modules!.hex"

 

2 replies

Jocelyn RICARD
ST Employee
March 6, 2024

Hello @amolina-nxt ,

what is your question ?

Best regards

Jocelyn

amolina-nxtAuthorBest answer
Associate II
March 8, 2024

I found what I was looking for to replace the appli_0.hex (SMAK default app) with our non-secure FW app:

 

set appli_valid=--firmware "%projectdir%Binary\appli_!nb_modules!.hex"