Repository navigation
docs: Describe the KRKNWK-22680 issue - #90
Open
ArekBalysNordic wants to merge 2 commits into
Open
ArekBalysNordic wants to merge 2 commits into
ArekBalysNordic wants to merge 2 commits into
Conversation
|
You can find the documentation preview for this PR here. Preview links for modified Matter add-on documents: |
There was a problem hiding this comment.
🟡 Changes recommended
The documented recovery and protection are absent from the pinned SDK, and the ITS workaround incorrectly includes KMU-backed devices.
2 open issues
What changed in this PR
This PR documents KRKNWK-22680, where nRF54L devices use ITS instead of KMU for DAC private-key storage, and adds v1.0.1 upgrade guidance.
Changes:
- Adds known-issue details, migration paths, and v1.0.1 release notes.
- Updates documentation navigation and enables known-issue filtering.
- Corrects the filtering extension’s JavaScript filename handling.
| File | Description |
|---|---|
docs/versions.json |
Adds v1.0.1 to the version list. |
docs/release_notes/release_notes_v101.rst |
Describes intended storage fixes and boot protection. |
docs/release_notes.rst |
Links the v1.0.1 release notes. |
docs/migration/migration_guide_v1.0.1.rst |
Adds backend-specific migration and validation guidance. |
docs/migration_guides.rst |
Links the v1.0.1 migration guide. |
docs/known_issues.rst |
Documents storage mismatches and adds issue filtering. |
docs/_extensions/page_filter.py |
Uses the script object’s filename for module imports. |
Review effort: Balanced
ArekBalysNordic
force-pushed
the
matter_1_0_1_ki
branch
from
October 23, 2026 09:08
acf57a2 to
7cb072d
Compare
|
The following west manifest projects have changed revision in this Pull Request:
⛔ DNM label due to: 1 project with PR revision Note: This message is automatically posted and updated by the Manifest GitHub Action. |
ArekBalysNordic
force-pushed
the
matter_1_0_1_ki
branch
from
October 23, 2026 09:19
7cb072d to
a480f1f
Compare
Updated of sdk-connectedhomeip. Signed-off-by: Arkadiusz Balys <arkadiusz.balys@nordicsemi.no>
Document the v1.0.0 nRF54L issue where the DAC private key could be stored in PSA ITS instead of CRACEN KMU, and how v1.0.1 restores KMU defaults on NCS v3.4.x. Update migration guidance, known issues, and release notes for CONFIG_CHIP_CRYPTO_PSA_DAC_PRIV_KEY_KMU_ITS_FALLBACK (default): units that already have the key in ITS can run KMU-default firmware, attest with the ITS copy, and re-provision later when KMU-only storage is required. Split KRKNWK-22680 guidance by where the key was first migrated (KMU vs ITS) so KMU-backed devices are directed to Path A instead of ITS Kconfig that cannot access a KMU-resident key. Signed-off-by: Arkadiusz Balys <arkadiusz.balys@nordicsemi.no>
ArekBalysNordic
force-pushed
the
matter_1_0_1_ki
branch
from
October 23, 2026 09:23
a480f1f to
37b3848
Compare
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The issue is related to moving DAC private key to ITS instead of KMU by default.