1##################
2Image signing keys
3##################
4
5- TFM_S_KEY.json      - private OEM key for signing CM0P image
6- TFM_S_KEY_PRIV.pem  - private OEM key for signing CM0P image in PEM format
7- TFM_NS_KEY.json     - private OEM key for signing CM4 image
8- TFM_NS_KEY_PRIV.pem - private OEM key for signing CM4 image in PEM format
9
10The keys included in the repository are for reference and development only.
11DO NOT USE THESE KEYS IN ANY ACTUAL DEPLOYMENT!
12
13Use cysecuretools to generate new key pairs defined by the policy file,
14for example:
15
16.. code-block:: bash
17
18    cd platform/ext/target/cypress/psoc64/security
19    cysecuretools -t cy8ckit-064s0s2-4343w init
20    cysecuretools -t cy8ckit-064s0s2-4343w -p policy/policy_multi_CM0_CM4_tfm.json create-keys
21
22
23Signing keys have to be provisioned to the board:
24
25.. code-block:: bash
26
27    cysecuretools -t cy8ckit-064s0s2-4343w -p policy/policy_multi_CM0_CM4_tfm.json re-provision-device
28
29
30Please refer to cysecuretools documentation and cypress_psoc64_spec.rst for
31more details.
32