Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

manifest: Update Matter revision to pull PSA Crypto changes #13516

Merged
merged 1 commit into from
Jan 4, 2024

Conversation

ArekBalysNordic
Copy link
Contributor

We need a mechanism to move the DAC private key from the factory data set to PSA ITS NVM storage during the first boot of the device.

The DAC private key will not exist in the factory data anymore after it moves and is protected from overwriting.

This feature is available only if the CONFIG_CHIP_CRYPTO_PSA config is set to y.

@github-actions github-actions bot added changelog-entry-required Update changelog before merge. Remove label if entry is not needed or already added. manifest labels Dec 29, 2023
@NordicBuilder
Copy link
Contributor

NordicBuilder commented Dec 29, 2023

The following west manifest projects have been modified in this Pull Request:

Name Old Revision New Revision Diff
matter nrfconnect/sdk-connectedhomeip@5f7a9f6 nrfconnect/sdk-connectedhomeip@50a62b4 nrfconnect/[email protected]

Note: This message is automatically posted and updated by the Manifest GitHub Action.

@NordicBuilder
Copy link
Contributor

NordicBuilder commented Dec 29, 2023

Test specification

CI/Jenkins/NRF

  • Integration Platforms

CI/Jenkins/integration

Test Module File based changes Manually selected West overwrite
test-fw-nrfconnect-chip X

test-fw-nrfconnect-chip: added because there was no .github/test-spec.yml in 'matter'

Detailed information of selected test modules

Note: This message is automatically posted and updated by the CI

@NordicBuilder
Copy link
Contributor

You can find the documentation preview for this PR at this link. It will be updated about 10 minutes after the documentation build succeeds.

Note: This comment is automatically posted by the Documentation Publishing GitHub Action.

@github-actions github-actions bot added doc-required PR must not be merged without tech writer approval. and removed changelog-entry-required Update changelog before merge. Remove label if entry is not needed or already added. labels Jan 3, 2024
doc/nrf/releases_and_maturity/migration_guides.rst Outdated Show resolved Hide resolved
doc/nrf/releases_and_maturity/migration_guides.rst Outdated Show resolved Hide resolved
@ArekBalysNordic
Copy link
Contributor Author

@wiba-nordic After some discussions, we decided to disable the CONFIG_CHIP_CRYPTO_PSA_MIGRATE_DAC_PRIV_KEY by default and have only the possibility for customers to enable it. The feature is not 100% tested so we should not enable it by default for any platform. I've changed the logic in all sentences. Could you please the recent changes? :)

We need a mechanism to move the DAC private key from
the factory data set to PSA ITS NVM storage during the
first boot of the device.

This feature is available only if the CONFIG_CHIP_CRYPTO_PSA config
is set to y.

You can enable removing the DAC private key from the factory data
partition after the migration by setting the
:kconfig:option:`CONFIG_CHIP_CRYPTO_PSA_MIGRATE_DAC_PRIV_KEY`
Kconfig option to ``y``

Signed-off-by: Arkadiusz Balys <[email protected]>
@LuDuda LuDuda merged commit 9e84401 into nrfconnect:main Jan 4, 2024
14 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
doc-required PR must not be merged without tech writer approval. manifest manifest-matter
Projects
None yet
Development

Successfully merging this pull request may close these issues.

7 participants