ESP-IDF does not support a partition of subtype "nvs" to be marked as "encrypted": reference: https://github.com/espressif/esp-idf/blob/release/v5.3/components/nvs_flash/src/nvs_partition_lookup.cpp#L21-L23 . You could enable the NVS encryption feature for the partition by initializing it using `nvs...

I realised that removing the "encrypted" flag from the last partition was solving the problem.

With the "last partition", do you mean the "storage" nvs partition?

Hello @Lobelois,

Is it possible for you to share your partition table csv?

Hi @askash kadam,

I think you should use the element for the config to attach the cert bundle instead of . The element expects a certificate string whereas expects a callback function pointer.

Thank you!

Hi @fschuetz, A similar issue has been reported in the mbedtls issues as well, could you please take a look into this thread https://github.com/libssh2/libssh2/commit/2e4c5ec4627b3ecf4b6da16f365c011dec9a31b4#commitcomment-141379351 . I think the crux of the above discussion is that the mbedtls_pk_lo...

Hello @vkp2808, I tried using the v5.2.2 tag of ESP-IDF but I was unable to recreate the issue. Using which ESP-IDF release are you facing the issue? You could also try out secure boot using QEMU (emulator) to "conserve" your testing devkits: 1. Build your firmware 2. Merge the binaries using: (cd b...

Hi @bramalka, I would suggest you to use the Flash Encryption development mode for generating a production-ready device. Reference docs: https://docs.espressif.com/projects/esp-idf/en/stable/esp32/security/flash-encryption.html#flash-enc-release-mode . While using development mode, you can disable f...

Hello @mikecarlos,

The steps that you have followed are correct and even I tried them out at my end and the device boots correctly.
But I am not sure why the bootloader does not boot up in your case. Could you share your sdkconfig file to help me to reproduce the issue?

Hi @yaghmr,

Addressing this issue at: https://github.com/espressif/esp-insigh ... 1976104736.

Thanks!

Skimmed through the sdkconfig and it looks just normal.

I'll try to build a smaller repro.

Thanks that would be really helpful!