skills.rest
beriberikix
beriberikixCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-updates

Automate secure boot and firmware update workflows for Zephyr-based devices.

59|13|Updated Feb 7, 2026
Search Tags:#rollback#ota-updates#zephyr#secure-boot#firmware-signing#mcumgr#dfu
One-click install
npx skills add https://github.com/beriberikix/zephyr-agent-skills --skill security-updates
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-updates
Source: https://github.com/beriberikix/zephyr-agent-skills/tree/main/skills/security-updates
Command: npx skills add https://github.com/beriberikix/zephyr-agent-skills --skill security-updates

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides end-to-end security workflows for Zephyr-based devices, ensuring secure boot, authenticated firmware updates, and robust rollback protection to prevent bricked devices.

Core Features & Use Cases

  • MCUboot Integration: configure secure bootloader flows and partition layouts.
  • Image Signing: manage production keys and digital signatures to protect firmware.
  • DFU Protocols: use MCUmgr for OTA and cloud-based update transport with safety checks.
  • Rollback Protection: atomic image swap and confirmation to recover from failed updates.
  • Crypto Basics: mbedTLS integration and secure storage patterns.

Quick Start

Use MCUboot with a signed Zephyr image and enable MCUmgr-based DFU in your project to deliver secure updates.

Frequently Asked Questions about security-updates

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure secure boot and OTA updates in Zephyr?▼

To configure secure boot and OTA updates in Zephyr, you integrate MCUboot for bootloader flows, sign firmware images with production keys, and enable MCUmgr for device firmware update transport with safety checks.

How does rollback protection work during a Zephyr firmware update?▼

Rollback protection in Zephyr works through atomic image swap and confirmation mechanisms, ensuring devices can automatically recover from failed or corrupted OTA updates without bricking.

Do I need MCUboot and imgtool to sign Zephyr firmware images?▼

Yes, you need MCUboot and imgtool to sign Zephyr firmware images, as these tools manage the digital signatures and cryptographic keys required to enforce secure boot authentication.

Can I use MCUmgr for cloud-based OTA deployments on Zephyr devices?▼

Yes, you can use MCUmgr for cloud-based OTA deployments on Zephyr devices, utilizing its transport protocols to deliver authenticated updates with necessary safety checks and version verification.

What are the flash partition requirements for MCUboot integration in Zephyr?▼

MCUboot integration in Zephyr requires proper flash partition configurations to support atomic image swaps, secure storage for cryptographic keys, and robust rollback protection during firmware updates.

Related Skills

Explore More Software Engineering Skills→
beriberikixberiberikix
59

storage

Manage NVS-backed persistent storage and flash partitions in Zephyr RTOS.

Community
Advanced
AminAlamAminAlam
26

Secure Over-the-Air Updates

Sign and verify OTA firmware images for medical device updates.

Community
Advanced
AminAlamAminAlam
26

Cryptographic Key Management

Manage cryptographic key lifecycle for medical devices with secure storage and rotation.

Community
Advanced
BrownFineSecurityBrownFineSecurity
811

chipsec

Analyze offline UEFI firmware dumps to detect malware and vulnerabilities.

Official
Advanced