PSOC64: Changing default policy for a eclipse based MTB project

[JBP]

Hi,

I am developing on CY8CKIT-064S0S2-4343W 

When I compile a P64 project at the end a cysecuretools sign-image is performed after build. I want to change the policy used for this command. 

Where can I set the options for this cysecuretools command?

[Rakshith · Accepted solution]

Hi @JBP, 

The policy for the CY8CKIT-064S0S2-4343W is bundled with the trusted firmware library (mtb_shared/trusted-firmware-m/release-v1.3.1/security/policy --policy policy_multi_CM0_CM4_tfm). You can either modify the policy file directly or use the Secure Policy Configurator. 

The post-build command is added in the BSP makefile (Hello_World/libs/TARGET_CY8CKIT-064S0S2-4343W/CY8CKIT-064S0S2-4343W.mk). You can change the policy path and the policy name here if needed -