Page 1 of 1

ESP-IDF v5.3 Only Shows Secure Boot V1 in menuconfig (ESP32-D0WD-V3, Rev 3.1)

Posted: Fri May 16, 2025 5:45 am
by Vaibhav02
Hi everyone,
I'm using ESP-IDF v5.3 on Windows (PowerShell), and my chip info is below:

Code: Select all

PS C:\Users\Admin\Desktop\std_gw> esptool.py read_mac
esptool.py v4.8.1
Found 2 serial ports
Serial port COM10
Connecting....
Detecting chip type... Unsupported detection protocol, switching and trying again...
Connecting....
Detecting chip type... ESP32
Chip is ESP32-D0WD-V3 (revision v3.1)
Features: WiFi, BT, Dual Core, 240MHz, VRef calibration in efuse, Coding Scheme None
Crystal is 40MHz
MAC: cc:db:a7:2e:e8:44
Uploading stub...
Running stub...
Stub running...
MAC: cc:db:a7:2e:e8:44
Hard resetting via RTS pin...
According to the documentation, this chip supports Secure Boot V2.

However, when I go to:

Code: Select all

idf.py menuconfig → Security Features → Enable hardware Secure Boot in bootloader → Select secure boot version
I only see Secure Boot V1, and there's no option to select V2.

I have already confirmed my ESP-IDF version:

Code: Select all

ESP-IDF v5.3-dirty
What could be causing this? Do I need to configure something extra to enable Secure Boot V2 in menuconfig?

Re: ESP-IDF v5.3 Only Shows Secure Boot V1 in menuconfig (ESP32-D0WD-V3, Rev 3.1)

Posted: Thu Nov 27, 2025 2:28 am
by jcolebaker
This is a bit late, but for anyone who finds this... I ran into the same issue using ESP-IDF v5.5.1

Secure Boot V2 is only supported on chip revisions 3.0 or later. To allow you to select secure boot V2, you also have to go to:

(Top) → Component config → Hardware Settings → Chip revision → Minimum Supported ESP32 Revision

And select "Rev v3.0 (ECO3)"

Secure boot V2 options will then be available.