You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardexpand all lines: docs/guides/infineon_trustm_provisioning.md
+15-9
Original file line number
Diff line number
Diff line change
@@ -7,7 +7,7 @@ OPTIGA™ Trust M with Matter test device Attestation certificate is needed.
7
7
8
8
[Raspberry Pi 4](https://www.raspberrypi.com/products/raspberry-pi-4-model-b/)
9
9
10
-
[OPTIGA™ Trust M S2GO](https://www.infineon.com/cms/en/product/evaluation-boards/s2go-security-optiga-m/)
10
+
[OPTIGA™ Trust M MTR](https://www.infineon.com/cms/en/product/evaluation-boards/trust-m-mtr-shield/)
11
11
12
12
[Shield2Go Adapter for Raspberry Pi](https://www.infineon.com/cms/en/product/evaluation-boards/s2go-adapter-rasp-pi-iot/)
13
13
or Jumping Wire
@@ -30,32 +30,38 @@ can be used to perform provisioning by following the steps mentioned below.
30
30
31
31
```
32
32
$ cd linux-optiga-trust-m/
33
-
$ ./trustm_installation_aarch64_script.sh
33
+
$ git checkout provider_dev
34
+
$ git submodule update -f
35
+
$ ./provider_installation_script.sh
34
36
```
35
37
36
38
- Run the script to generate Matter test DAC for lock-app using the public key
37
39
extracted from the Infineon pre-provisioned Certificate and store it into
38
-
0xe0e3
40
+
0xE0E0
39
41
40
42
```
41
43
$ cd scripts/matter_provisioning/
42
-
$ ./matter_dac_provisioning.sh
44
+
$ ./matter_test_provisioning.sh
43
45
```
44
46
45
47
_Note:_
46
48
47
-
_By running this example matter_dac_provisioning.sh, the steps shown below are
49
+
_By running this example matter_test_provisioning.sh, the steps shown below are
48
50
executed:_
49
51
50
52
_Step1: Extract the public key from the Infineon pre-provisioned
51
-
Certificate(0xe0e0) using openssl command._
53
+
Certificate(0xE0E0) using openssl command._
52
54
53
55
_Step2: Generate DAC test certificate using the extracted public key, Signed by
54
56
[Matter test PAI](https://github.com/project-chip/connectedhomeip/blob/v1.1-branch/credentials/development/attestation/Matter-Development-PAI-FFF1-noPID-Cert.pem)_.
55
57
Please note that production devices cannot re-use these test keys/certificates.
56
58
57
59
_Step3: Write DAC test certificate into OPTIGA™ Trust M certificate slot
58
-
0xe0e3_
60
+
0xE0E0._
59
61
60
-
_Step4: Write Matter test PAI into OPTIGA™ Trust M certificate slot 0xe0e8
61
-
and test CD into OPTIGA™ Trust M Arbitrary OID 0xf1e0._
62
+
_Step4: Write Matter test PAI into OPTIGA™ Trust M certificate slot 0xE0E8
63
+
and test CD into OPTIGA™ Trust M Arbitrary OID 0xF1E0._
64
+
65
+
For certificate claim and OPTIGA™ Trust M MTR provisioning, please refer
66
+
to our
67
+
[README for Late-stage Provisioning](https://github.com/Infineon/linux-optiga-trust-m/blob/provider_dev/scripts/matter_provisioning/README.md#certificate-claiming)
0 commit comments