Security and development: enabling secure boot after signed app images
Posted: Tue Aug 12, 2025 1:34 am
Hi
I'm developing a product with an ESP32 C5 and IDF v5.5.
For production, I'd like to enable:
- secure boot v2
- signed app images (yes, this product will have OTA)
- encrypted flash
- secure UART ROM download mode
My issue right now is that if I enable secure boot, the serial flasher download stub is automatically disabled, which means that flashing takes significantly longer (25 seconds vs 10 seconds). This might not seem like much, but it really slows me down when I'm developing.
Can I turn on the above security features EXCEPT secure boot now, and then when development is mainly complete turn on Secure Boot?
Thanks
I'm developing a product with an ESP32 C5 and IDF v5.5.
For production, I'd like to enable:
- secure boot v2
- signed app images (yes, this product will have OTA)
- encrypted flash
- secure UART ROM download mode
My issue right now is that if I enable secure boot, the serial flasher download stub is automatically disabled, which means that flashing takes significantly longer (25 seconds vs 10 seconds). This might not seem like much, but it really slows me down when I'm developing.
Can I turn on the above security features EXCEPT secure boot now, and then when development is mainly complete turn on Secure Boot?
Thanks