Prerequisites

To use this command, you need a JSON file with one or more key definitions.

You can generate the required keys by using the generate_psa_key_attributes.py script in the nRF Connect SDK. For example, you can follow the steps on the Provisioning keys on the nRF54H20 SoC page. This script also adds the possibility add keys from a .pem file.

The file structure is identical for both the nRF54L and the nRF54H Series:

{
  "version": 0,
  "keyslots" : [
    {
      "metadata": "0x4241FF0001004E800108000000080006000000000021024000000000",
      "value": "0x20d93327cae67d44db0fcc3a3a79ffc109cc9092163529ff2a72fb21cad872c8"
    }
  ]
}

In this structure:

• version - The file version format; currently, should always be 0 for new keys.
• keyslots - Structure with information for the given key slot.
• metadata - Binary data describing the key attributes for PSA Crypto API; nRF Util expects 28 bytes (with excess truncated).
• value - The key data to be imported.

The file can include several pairs of metadata and value.