Flash Encyption and Secure Boot through OTA

[nikola]

Hi,

I am reading the docs regarding flash encryption and secure boot but can't seem to find if it can be enabled through OTA to previously unsecured system. So is this possible and if yes do I need to do something more than pushing OTA of the firmware with these settings enabled?

Thanks.

[WiFive]

Not supported, risk of bricking devices, but technically possible. There are other posts in the forum about updating the partition table and bootloader via ota which would be required.

[nikola]

The reason that I am asking is I would like to buy some ESP32-MeshKit-Light bulbs and upload my custom firmware to them but also I need them to be encrypted since they will contain some web login details. So bricking them during OTA is an acceptable risk for me. It is far better then breaking the bulbs apart and soldering wires in order to flash.