diff --git a/samples/sid_end_device/Kconfig.sysbuild b/samples/sid_end_device/Kconfig.sysbuild index e68e070ef..11639dd90 100644 --- a/samples/sid_end_device/Kconfig.sysbuild +++ b/samples/sid_end_device/Kconfig.sysbuild @@ -13,6 +13,11 @@ endchoice if BOOTLOADER_MCUBOOT +# Downgrade prevention +choice MCUBOOT_MODE + default MCUBOOT_MODE_OVERWRITE_ONLY +endchoice + config DFU_MULTI_IMAGE_PACKAGE_BUILD default y @@ -27,10 +32,6 @@ if (BOARD_NRF5340DK_NRF5340_CPUAPP || BOARD_THINGY53_NRF5340_CPUAPP) config MCUBOOT_UPDATEABLE_IMAGES default 2 -choice MCUBOOT_MODE - default MCUBOOT_MODE_OVERWRITE_ONLY -endchoice - choice BOOT_SIGNATURE_TYPE default BOOT_SIGNATURE_TYPE_RSA endchoice diff --git a/samples/sid_end_device/sysbuild/mcuboot/prj.conf b/samples/sid_end_device/sysbuild/mcuboot/prj.conf index a7b007d31..7c92c668c 100644 --- a/samples/sid_end_device/sysbuild/mcuboot/prj.conf +++ b/samples/sid_end_device/sysbuild/mcuboot/prj.conf @@ -6,7 +6,10 @@ CONFIG_MAIN_STACK_SIZE=10240 -CONFIG_BOOT_SWAP_SAVE_ENCTLV=n +# Downgrade prevention +CONFIG_BOOT_SWAP_USING_MOVE=n +CONFIG_BOOT_UPGRADE_ONLY=y + CONFIG_BOOT_BOOTSTRAP=n CONFIG_PM=n