Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updated guide for Infineon Trust M provisioning #33132

Merged
merged 4 commits into from
Apr 30, 2024
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions .github/.wordlist.txt
Original file line number Diff line number Diff line change
Expand Up @@ -905,6 +905,7 @@ MoveWithOnOff
MPSL
MRP
MTD
MTR
andy31415 marked this conversation as resolved.
Show resolved Hide resolved
MTU
Multiband
Multicast
Expand Down
20 changes: 13 additions & 7 deletions docs/guides/infineon_trustm_provisioning.md
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,9 @@ can be used to perform provisioning by following the steps mentioned below.

```
$ cd linux-optiga-trust-m/
$ ./trustm_installation_aarch64_script.sh
$ git checkout provider_dev
$ git submodule update -f
$ ./provider_installation_script.sh
```

- Run the script to generate Matter test DAC for lock-app using the public key
Expand All @@ -39,13 +41,13 @@ can be used to perform provisioning by following the steps mentioned below.

```
$ cd scripts/matter_provisioning/
$ ./matter_dac_provisioning.sh
$ ./matter_test_provisioning.sh
```

_Note:_

_By running this example matter_dac_provisioning.sh, the steps shown below are
executed:_
_By running this example `matter_test_provisioning.sh`, the steps shown below
are executed:_

_Step1: Extract the public key from the Infineon pre-provisioned
Certificate(0xE0E0) using openssl command._
Expand All @@ -55,7 +57,11 @@ _Step2: Generate DAC test certificate using the extracted public key, Signed by
Please note that production devices cannot re-use these test keys/certificates.

_Step3: Write DAC test certificate into OPTIGA™ Trust M certificate slot
0xE0E0_
0xE0E0._

\_Step4: Write Matter test PAI into OPTIGA™ Trust M certificate slot
0xE0E8 and test CD into OPTIGA™ Trust M Arbitrary OID 0xF1E0.
_Step4: Write Matter test PAI into OPTIGA™ Trust M certificate slot 0xE0E8
and test CD into OPTIGA™ Trust M Arbitrary OID 0xF1E0._

For certificate claim and OPTIGA™ Trust M MTR provisioning, please refer
to our
[README for Late-stage Provisioning](https://github.com/Infineon/linux-optiga-trust-m/blob/provider_dev/scripts/matter_provisioning/README.md#certificate-claiming)
Loading