— FLASH_SIZE
• Flash map:
— Binaries’ images addresses
— Certificates’ addresses
If specific image binaries (such as the main application or audio playback) must be updated in the Ivaldi package’s Image_Binaries
folder, make sure that the Scripts/sln_local2_iot_config/board_config.py configuration file has correct file names and addresses.
Any changes in Scripts/sln_local2_iot_config/board_config.py (except for binaries' names) also require updating
the embedded code and configurations.
NOTE
11.1.5 Boot programming modes and security features
The Ivaldi package supports multiple boot settings with various security features. In the open boot programming, the HAB is
disabled. In the secure boot programming, the HAB is enabled. There are various security feature options with (or without) signing
certificates.
summarizes the security features for the open and secure boot modes. By default, the SLN-LOCAL2-IOT
kit is enabled with image verification in the open boot mode.
Table 13. Summary of boot mode and security features
Boot mode/
security features
HAB
Signing certificates
(image verification)
Open boot
No
No
Recommended only for development
No
Yes
Default
Secure boot
Yes
Yes
Most secure
11.2 NXP application image signing tool
The signing tool is a Python application that is responsible for using a signed Certificate Signing Request (CSR) to sign the binaries
and append the certificate to the binary ready to be deployed to OTA/OTW services.
The following instructions assume that the README file in the Ivaldi root directory is followed to set up the Python virtual
environment. If this is not done, the scripts fail.
To start, navigate to the “Scripts/ota_signing” directory inside Ivaldi.
11.2.1 Generating signing entity
The Ivaldi tools provided by NXP include the CA, but the end users must create their own CA and signing artifacts. For information
about the chain of trust used by NXP from the factory, see
Ivaldi includes a script to generate all of the artifacts needed to properly sign application binaries and generate a FICA table. Before
running the script, the Ivaldi environment must be set up completely as described in the README.md file in the top-level directory.
In the Python virtual environment, navigate to Scripts/ota_signing. Run the generate_signing_artifacts.py script. When running
without any arguments, the usage is displayed.
NXP Semiconductors
Automated manufacturing tools
SLN-LOCAL2-IOT Developer’s Guide, Rev. 0, 19 April 2021
User's Guide
71 / 87
