security-updates

Automate secure boot and firmware update workflows for Zephyr-based devices.

59|13|Updated Feb 7, 2026

Search Tags:#rollback #ota-updates #zephyr #secure-boot #firmware-signing #mcumgr #dfu

Ready to run

npx skills add https://github.com/beriberikix/zephyr-agent-skills --skill security-updates

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-updates
Source: https://github.com/beriberikix/zephyr-agent-skills/tree/main/skills/security-updates
Command: npx skills add https://github.com/beriberikix/zephyr-agent-skills --skill security-updates

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides end-to-end security workflows for Zephyr-based devices, ensuring secure boot, authenticated firmware updates, and robust rollback protection to prevent bricked devices.

Core Features & Use Cases

MCUboot Integration: configure secure bootloader flows and partition layouts.
Image Signing: manage production keys and digital signatures to protect firmware.
DFU Protocols: use MCUmgr for OTA and cloud-based update transport with safety checks.
Rollback Protection: atomic image swap and confirmation to recover from failed updates.
Crypto Basics: mbedTLS integration and secure storage patterns.

Quick Start

Use MCUboot with a signed Zephyr image and enable MCUmgr-based DFU in your project to deliver secure updates.

Frequently Asked Questions about security-updates

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I configure secure boot and OTA updates in Zephyr?▼

To configure secure boot and OTA updates in Zephyr, you integrate MCUboot for bootloader flows, sign firmware images with production keys, and enable MCUmgr for device firmware update transport with safety checks.

How does rollback protection work during a Zephyr firmware update?▼

Rollback protection in Zephyr works through atomic image swap and confirmation mechanisms, ensuring devices can automatically recover from failed or corrupted OTA updates without bricking.

Do I need MCUboot and imgtool to sign Zephyr firmware images?▼

Yes, you need MCUboot and imgtool to sign Zephyr firmware images, as these tools manage the digital signatures and cryptographic keys required to enforce secure boot authentication.

Can I use MCUmgr for cloud-based OTA deployments on Zephyr devices?▼

Yes, you can use MCUmgr for cloud-based OTA deployments on Zephyr devices, utilizing its transport protocols to deliver authenticated updates with necessary safety checks and version verification.

What are the flash partition requirements for MCUboot integration in Zephyr?▼

MCUboot integration in Zephyr requires proper flash partition configurations to support atomic image swaps, secure storage for cryptographic keys, and robust rollback protection during firmware updates.