From 6b099b1c672510af08df97aacda04aae9343d09b Mon Sep 17 00:00:00 2001
From: Arturo Buzarra <arturo.buzarra@digi.com>
Date: Tue, 9 Dec 2025 12:51:15 +0100
Subject: [PATCH] swupdate: mmc uboot: skip appending encryption key on CCMP2
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Do not append the encryption key to the bootloader on STM platforms, it’s not
required and triggers an installation error.

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
---
 .../recipes-digi/swu-images/files/swupdate_uboot_mmc.sh     | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/meta-digi-dey/recipes-digi/swu-images/files/swupdate_uboot_mmc.sh b/meta-digi-dey/recipes-digi/swu-images/files/swupdate_uboot_mmc.sh
index 032922afc..8904c0ebf 100755
--- a/meta-digi-dey/recipes-digi/swu-images/files/swupdate_uboot_mmc.sh
+++ b/meta-digi-dey/recipes-digi/swu-images/files/swupdate_uboot_mmc.sh
@@ -1,7 +1,7 @@
 #!/bin/sh
 #===============================================================================
 #
-#  Copyright (C) 2022-2024 by Digi International Inc.
+#  Copyright (C) 2022-2025 by Digi International Inc.
 #  All rights reserved.
 #
 #  This program is free software; you can redistribute it and/or modify it
@@ -257,8 +257,8 @@ write_artifact_emmc ()
 }
 
 # If U-Boot is encrypted, the DEK key blob needs to be extracted from existing U-Boot
-# and appended to the new U-Boot before writing it.
-if [ "${UBOOT_ENC}" = "enc" ]; then
+# and appended to the new U-Boot before writing it for NXP platforms.
+if [ "${UBOOT_ENC}" = "enc" ] && [[ "${PLATFORM}" != ccmp2* ]]; then
 	append_dek
 fi
 # Write TFA.