Portenta H7 tutorial: Secure Boot [PC-894]

[umbynos]

What This PR Changes

• Add an "how to" guide about secure boot for the Portenta H7. With a focus on how to generate custom security keys.

What Needs To Be Reviewed

• The overall content. I'm not really that familiar in writing guides and tutorials @sebromero @pennam @ubidefeo

How To Give Feedback

Please leave your feedback as a Github review.
You can add comments to specific lines of content / code and ideally use Github's suggestion feature. 🙏

[ubidefeo]

LGTM

[jhansson-ard]

@pennam you need to change your review to an approve one for us to move forward with the approval of the article.

@karlsoderby please review from a content perspective! Thanks!

[marqdevx]

Content LGTM, just fixed some typos or formatting issues.
Thank you!

I will add some screenshot to show the new selector on the dropdown for using the keys.

[marqdevx]

@umbynos Is it compatible with the lite and lite-connected? (i guess it isnt as they dont have the crypto chip, if im not wrong 🤔)

[marqdevx]

Also this link is dead right now
https://arduino.github.io/arduino-cli/latest/guides/secure-boot/

[umbynos]

Also this link is dead right now
https://arduino.github.io/arduino-cli/latest/guides/secure-boot/

You are right, the link will be working when the new release of the arduino-cli that include the secure boot will be made. As of now, you can find the content of the link here https://arduino.github.io/arduino-cli/dev/guides/secure-boot/, but it's not recommended to point to the development version of the page.

[pennam]

@marqdevx yes, they will be supported because by default MCUboot does not rely on any hw crypto. There is the possibility to implement signature verification and encryption key unwrapping using a crypto but this is not done yet, all the crypto magic is done by software with mbedtls.

[marqdevx]

Perfect! Thanks for the aclaration.

Just made this tutorial available on lite and lite-connected aswell at 49c15cf

For the link should we wait to have the published one before merging this tutorial? If you want to merge it now, we just need to hide it until the link works :)

[sebromero]

Good stuff @umbynos ! Please have a look at my suggestions and questions.
Also, I think it would be very beneficial to add a paragraph in the Introduction section explaining the use case for secure boot. Why would anyone want to use it? Intellectual property protection? Tamper proof? ...

[marqdevx]

@umbynos Let me know if you need anything to continue with this merge :D

[umbynos]

@umbynos Let me know if you need anything to continue with this merge :D

@marqdevx I think with a final review by @sebromero we are good to go.
As you suggested regarding the link, maybe we should wait to have the published one before merging this

[sebromero]

Let's change this and we're good to go.

[sebromero]

LGTM

[sebromero]

@pennam Please have a final look. If you're good with it, we can merge it.

[pennam]

@umbynos @sebromero 👍