Secure Firmware update

[Rajendra_2002]

I am working with the STM32U585RIT6 and need to implement a secure firmware update. In my application code, I don’t want to handle flash management or low-level update logic. I only want to generate a secure binary file and perform the update.
I reviewed the SBSFU and X-CUBE-SFI examples. The X-CUBE-SFI solution requires a license and an HSM card, which I do not want to use. The SBSFU example available under B-U585I-IOT02A/Projects/Application/SBSFU involves multiple procedures and is somewhat difficult to understand.
Given these constraints, how should I approach implementing a secure firmware update?

[TDK]

If you don't want to write your own library, you're going to be limited to the available solutions. I would suggest spending more time trying to understand those.

Doing a "secure" update is going to be more complicated that just uploading a firmware binary file to the chip.