Lines Matching refs:image
38 1. **The bootloader**. This is a small code/data image contained in
40 a root of trust, this image must be immutable. This model assumes
42 from future writes, and that this will be done after this image is
45 2. **The application firmware image**. This asset consists of the
47 is made because this part of the image will need to be updated
49 for updates to this image are:
51 a. The image shall only be replaced with an authorized image
54 b. When an authorized replacement image is available, the update
57 c. The image update shall be seen as atomic, meaning that when the
58 image is run, the flash shall contain either the update image in
59 its entirety, or the old image in its entirety
124 a. **Firmware image updates**. The system should log the download of
125 new images, and when an image is successfully updated.
152 application image as well as updating the application image from
153 the update image when an update is needed.
155 The bootloader shall verify the signature of the update image
158 The bootloader shall only accept an update image with a newer
159 version number than the current image.
161 b. **The application image**. The application image contains the code
163 this image, the bootloader shall verify a digital signature of the
164 image, to avoid running an image that has been tampered with. The
167 image.
169 c. **The update image**. This is an area of flash that holds a new
170 version of the application image. This image will be downloaded
173 bootloader can install the new image.
177 application image. The application shall be configured to
298 image, a device secret, and initial configuration data
345 .. [th-authrepl] Application image shall only be replaced with an
346 authorized image.