The latest development version of this page may be more current than this released 2.7.5 version.

CONFIG_TFM_KEY_FILE_S

Path to private key used to sign secure firmware images.

Type: string

Help

The path and filename for the .pem file containing the private key
that should be used by the BL2 bootloader when signing secure
firmware images.

Direct dependencies

BUILD_WITH_TFM && BUILD_WITH_TFM && 0

(Includes any dependencies from ifs and menus.)

Default

  • “/home/runner/work/zephyr/zephyr/../modules/tee/tfm/trusted-firmware-m/bl2/ext/mcuboot/root-RSA-3072.pem”

Kconfig definition

At modules/trusted-firmware-m/Kconfig.tfm:53

Included via Kconfig:8Kconfig.zephyr:33modules/Kconfig:74modules/trusted-firmware-m/Kconfig:7

Menu path: (Top) → Modules → Build with TF-M as the Secure Execution Environment

config TFM_KEY_FILE_S
    string "Path to private key used to sign secure firmware images."
    default "/home/runner/work/zephyr/zephyr/../modules/tee/tfm/trusted-firmware-m/bl2/ext/mcuboot/root-RSA-3072.pem"
    depends on BUILD_WITH_TFM && BUILD_WITH_TFM && 0
    help
      The path and filename for the .pem file containing the private key
      that should be used by the BL2 bootloader when signing secure
      firmware images.

(The ‘depends on’ condition includes propagated dependencies from ifs and menus.)