Test Secure Boot on STM32MP157A

VarunKumar · ‎2025-10-02

Hi,

I am trying to understand and test secure boot on STM32MP1. I was able to compile and boot unsigned tf-a. boot failed as expected as it is not verified.
generated keys.

Now how to burn these below hash file? can we burn into flash and test without using OTP for development and POC?

publicKeyhash.bin

Thank you.

Olivier GALLIEN · ‎2025-10-03

Hi @VarunKumar

I guess this page could provide you useful hint and pointers How to enable secure boot on STM32 MPU - stm32mpu

Olivier

Olivier GALLIEN
In order to give better visibility on the answered topics, please click on 'Accept as Solution' on the reply which solved your issue or answered your question.

VarunKumar · ‎2026-02-12

Hi,

I am using the STM32MP157AA MPU and have reviewed the documentation. I have one question:

Can I verify Trusted Boot without executing the following command?

" stm32key fuse ${loadaddr} "

Since this operation permanently programs the OTP and cannot be reverted, I would like to verify the Trusted Boot functionality before writing the keys into OTP.

Please let me know if this is possible.