We are using the latest esp_modem and are connected using CMUX mode with PPP on a SIMCOM 7672 (76xx family). Our esp_modem configuration is:
#
# esp-modem
#
# CONFIG_ESP_MODEM_CMUX_DEFRAGMENT_PAYLOAD is not set
# CONFIG_ESP_MODEM_USE_INFLATABLE_BUFFER_IF_NEEDED is not set
CONFIG_ESP_MODEM_CMUX ...

I believe to change versions, you have to run install.sh for the version you want first.

The problem I observed is that the ~/.espressif contents is ESP-IDF version specific.
Espressif have not bothered to allow multiple versions to co-exist.

I believe to change versions, you have to run install.sh for the version you want first.

The problem I observed is that the ~/.espressif contents is ESP-IDF version specific.
Espressif have not bothered to allow multiple versions to co-exist.

The documentation regarding Secure Boot using espsecure.py to generate the digest for burning the eFuse signature block assumes that the private key is available.

We are using an external HSM (Digicert, via PKS11) and we're wondering how we can do this from a pre-signed binary (or what other method ...

I know this is late, but my guess is that you are starting with a public PEM rather than the required private PEM.

Thanks for your answers.

Also note that you have to erase the flash (idf.py -p PORT erase_flash) before you start the procedure otherwise you can get ESP_ERR_NVS_CORRUPT_KEY_PART.

This also applies to ESP32's delivered from the factory as they are not always erased when received.

I have thoroughly read through your suggested documentation you suggested at https://docs.espressif.com/projects/esp-idf/en/latest/esp32/security/host-based-security-workflows.html#enable-flash-encryption-and-secure-boot-v2-externally

We simply request a complete step-by-step with command lines ...

Can someone PLEASE respond to this. It MUST have been done by Espressif at some point, so why not just show us EXACTLY what you did to prove it works.

Any updates?

?