OTA security

[kelvinlo0227]

Hello Big Bro,

I am new to the ESP32, I'd like to know directly:
1) Could ESP32-WROOM-32E run any OS on the chip like Ubuntu (like Rasberry Pi)?
2) If I want to change the firmware in ESP32-WROOM-32E by OTA (over-the-air), is it possible? Any link or tutorial?
3) If question 2 is yes, is there any security means during OTA, so that no one can "hack" my ESP32-WROOM-32E devices with the same OTA process?

Hope I am not asking some silly questions and someone who is expert could show me the right way.

Thank you very much for all!

[WiFive]

1. No, only small rtos.
2. Yes, many blogs, videos, GitHub projects, and official examples.
3. Usually ota is secured with https and client/server certificates.

[graceyoung-ww]

1. answered above
2. You may want to check the official documentation (a quick Google search will uncover it) — https://docs.espressif.com/projects/esp ... m/ota.html
3. There is a Secure Boot mechanism on the ESP32 that aids with firmware security for OTA udpates — https://docs.espressif.com/projects/esp ... ot-v2.html. You'll probably need to implement a few other measures as well.