Page 1 of 1

OTA security

Posted: Mon Mar 07, 2022 4:53 am
by kelvinlo0227
Hello Big Bro,

I am new to the ESP32, I'd like to know directly:
1) Could ESP32-WROOM-32E run any OS on the chip like Ubuntu (like Rasberry Pi)?
2) If I want to change the firmware in ESP32-WROOM-32E by OTA (over-the-air), is it possible? Any link or tutorial?
3) If question 2 is yes, is there any security means during OTA, so that no one can "hack" my ESP32-WROOM-32E devices with the same OTA process?

Hope I am not asking some silly questions and someone who is expert could show me the right way.

Thank you very much for all! :D

Re: OTA security

Posted: Mon Mar 07, 2022 10:37 pm
by WiFive
1. No, only small rtos.
2. Yes, many blogs, videos, GitHub projects, and official examples.
3. Usually ota is secured with https and client/server certificates.

Re: OTA security

Posted: Mon Mar 21, 2022 3:05 am
by graceyoung-ww
1. answered above
2. You may want to check the official documentation (a quick Google search will uncover it) — https://docs.espressif.com/projects/esp ... m/ota.html
3. There is a Secure Boot mechanism on the ESP32 that aids with firmware security for OTA udpates — https://docs.espressif.com/projects/esp ... ot-v2.html. You'll probably need to implement a few other measures as well.