The latest development version of this page may be more current than this released 2.6.1-rc1 version.
CONFIG_TFM_KEY_FILE_NS

Path to private key used to sign non-secure firmware images.

Path to private key used to sign non-secure firmware images.

Type: string

Help

The path and filename for the .pem file containing the private key
that should be used by the BL2 bootloader when signing non-secure
firmware images.

Help

The path and filename for the .pem file containing the private key
that should be used by the BL2 bootloader when signing non-secure
firmware images.

Direct dependencies

(BUILD_WITH_TFM && BUILD_WITH_TFM) || (BUILD_WITH_TFM && BUILD_WITH_TFM && 0)

(Includes any dependencies from ifs and menus.)

Defaults

  • “/home/nashif/zephyrproject/zephyr/../modules/tee/tfm/trusted-firmware-m/bl2/ext/mcuboot/root-RSA-3072_1.pem”

  • “/home/nashif/zephyrproject/zephyr/../modules/tee/tfm/trusted-firmware-m/bl2/ext/mcuboot/root-RSA-3072_1.pem”

Kconfig definitions

At modules/trusted-firmware-m/Kconfig:62

Included via Kconfig:8Kconfig.zephyr:23modules/Kconfig:6doc/_build/Kconfig/Kconfig.modules:26

Menu path: (Top) → Modules → trusted-firmware-m (/home/nashif/zephyrproject/modules/tee/tfm) → Build with TF-M as the Secure Execution Environment

config TFM_KEY_FILE_NS
    string "Path to private key used to sign non-secure firmware images."
    default "/home/nashif/zephyrproject/zephyr/../modules/tee/tfm/trusted-firmware-m/bl2/ext/mcuboot/root-RSA-3072_1.pem"
    depends on BUILD_WITH_TFM && BUILD_WITH_TFM
    help
      The path and filename for the .pem file containing the private key
      that should be used by the BL2 bootloader when signing non-secure
      firmware images.

At modules/trusted-firmware-m/Kconfig:62

Included via Kconfig:8Kconfig.zephyr:23modules/Kconfig:66

Menu path: (Top) → Modules → Build with TF-M as the Secure Execution Environment

config TFM_KEY_FILE_NS
    string "Path to private key used to sign non-secure firmware images."
    default "/home/nashif/zephyrproject/zephyr/../modules/tee/tfm/trusted-firmware-m/bl2/ext/mcuboot/root-RSA-3072_1.pem"
    depends on BUILD_WITH_TFM && BUILD_WITH_TFM && 0
    help
      The path and filename for the .pem file containing the private key
      that should be used by the BL2 bootloader when signing non-secure
      firmware images.

(The ‘depends on’ condition includes propagated dependencies from ifs and menus.)