ESP-IDF does not support a partition of subtype "nvs" to be marked as "encrypted": reference: https://github.com/espressif/esp-idf/blob/release/v5.3/components/nvs_flash/src/nvs_partition_lookup.cpp#L21-L23 .

You could enable the NVS encryption feature for the partition by initializing it using ...

I realised that removing the "encrypted" flag from the last partition was solving the problem.

With the "last partition", do you mean the "storage" nvs partition?

Hello @Lobelois,

Is it possible for you to share your partition table csv?

Hi @askash kadam,

I think you should use the element for the config to attach the cert bundle instead of . The element expects a certificate string whereas expects a callback function pointer.

Thank you!

Hi @fschuetz,

A similar issue has been reported in the mbedtls issues as well, could you please take a look into this thread https://github.com/libssh2/libssh2/commit/2e4c5ec4627b3ecf4b6da16f365c011dec9a31b4#commitcomment-141379351 .

I think the crux of the above discussion is that the mbedtls_pk ...

Hello @vkp2808,

I tried using the v5.2.2 tag of ESP-IDF but I was unable to recreate the issue.
Using which ESP-IDF release are you facing the issue?

You could also try out secure boot using QEMU (emulator) to "conserve" your testing devkits:

1. Build your firmware
2. Merge the binaries using ...

Hi @bramalka,

I would suggest you to use the Flash Encryption development mode for generating a production-ready device.
Reference docs: https://docs.espressif.com/projects/esp-idf/en/stable/esp32/security/flash-encryption.html#flash-enc-release-mode .

While using development mode, you can disable ...

Hello @mikecarlos,

The steps that you have followed are correct and even I tried them out at my end and the device boots correctly.
But I am not sure why the bootloader does not boot up in your case. Could you share your sdkconfig file to help me to reproduce the issue?

Hi @yaghmr,

Addressing this issue at: https://github.com/espressif/esp-insigh ... 1976104736.

Thanks!

Skimmed through the sdkconfig and it looks just normal.

I'll try to build a smaller repro.

Thanks that would be really helpful!