CONFIG_HW_UNIQUE_KEY_LOAD

Load Hardware Unique key on boot

Type: bool

Help

Use this on devices with no KMU. Enable this in the immutable
bootloader to load the HUK from the allocated flash area
"hw_unique_key_partition" and lock the flash area so no subsequent
code can read it.
The code allows the app to write a (typically random) key to the flash
area on the first clean boot. On subsequent boots, the bootloader
will fail if no key is present.

Direct dependencies

HAS_HW_NRF_ACL && HAS_HW_NRF_CC310 && NRF_CC3XX_PLATFORM

(Includes any dependencies from ifs and menus.)

Defaults

No defaults. Implicitly defaults to n.

Symbols selected by this symbol

FPROTECT

Symbols implied by this symbol

Kconfig definition

At <nRF>/lib/hw_unique_key/Kconfig:14

Included via <Zephyr>/Kconfig:8 → <Zephyr>/Kconfig.zephyr:33 → <Zephyr>/modules/Kconfig:6 → <nRF>/doc/_build/kconfig/Kconfig.modules:2 → <nRF>/Kconfig.nrf:94 → <nRF>/lib/Kconfig:33

Menu path: (Top) → Modules → nrf (/home/runner/work/sdk-nrf/sdk-nrf/ncs/nrf) → Nordic nRF Connect → Libraries

config HW_UNIQUE_KEY_LOAD
    bool "Load Hardware Unique key on boot"
    select FPROTECT
    imply FPROTECT_ENABLE_NO_ACCESS
    imply NRFX_NVMC
    depends on HAS_HW_NRF_ACL && HAS_HW_NRF_CC310 && NRF_CC3XX_PLATFORM
    help
      Use this on devices with no KMU. Enable this in the immutable
      bootloader to load the HUK from the allocated flash area
      "hw_unique_key_partition" and lock the flash area so no subsequent
      code can read it.
      The code allows the app to write a (typically random) key to the flash
      area on the first clean boot. On subsequent boots, the bootloader
      will fail if no key is present.

(The ‘depends on’ condition includes propagated dependencies from ifs and menus.)