Added example x.509 certificate for provisioning.

Author: romanjoe

targets/TARGET_Cypress/TARGET_PSOC6/sb-tools/README.md

@@ -2,6 +2,8 @@ This directory contains tools and scripts for generating keys, preparing provisi
 These files are relevant to CY8CPROTO_064_SB or CY8CPROTO_064_SB_M0_PSA, CY8CPROTO_064_SB_PSA targets.
 Version of Python required is 3.7+
 
+**_NOTE_:** Detailed description about Secure Boot tools availabe on this link https://www.cypress.com/secureboot-sdk-user-guide
+
 # DEVICE PROVISIONING
 
 ## 1.   Generate new keys by executing the following commands from ./keys:
@@ -15,7 +17,7 @@ Version of Python required is 3.7+
     python keygen.py --aes aes.key
 
         
-**_NOTE_:** DO NOT COMMIT any new keys to repository. ---
+**_NOTE_:** DO NOT COMMIT any new keys to repository.
 
 ## 2.   Create provisioning packets:
 Use *provisioning_packet.py* from ./prepare folder.
@@ -33,11 +35,13 @@ Options:
 
 * To create packet for CY8CPROTO_064_SB target using single-stage policy (CM4 only):
 
-        python provisioning_packet.py --policy policy_single_stage_CM4.json --out ../packet --cyboot ../prebuild/CyBootloader_Release/CypressBootloader_CM0p.jwt --ckey ../keys/USERAPP_CM4_KEY.json
+        python provisioning_packet.py --policy policy_single_stage_CM4.json --out ../packet --cyboot ../prebuild/CyBootloader_Release/CypressBootloader_CM0p.jwt --ckey ../keys/USERAPP_CM4_KEY.json --devcert example_cert.pem
 
 * To use external memory (via SMIF) as staging(upgrade) area (slot_1) of NSPE (CM4) image use policy file with corresponding name:
 
-        python provisioning_packet.py --policy policy_single_stage_CM4_smif.json --out ../packet --cyboot ../prebuild/CyBootloader_Release/CypressBootloader_CM0p.jwt --ckey ../keys/USERAPP_CM4_KEY.json
+        python provisioning_packet.py --policy policy_single_stage_CM4_smif.json --out ../packet --cyboot ../prebuild/CyBootloader_Release/CypressBootloader_CM0p.jwt --ckey ../keys/USERAPP_CM4_KEY.json --devcert example_cert.pem
+        
+    The certificate in above examples is signed with OEM key from ./prebuild folder.
 
 Prebuild folder contains CyBootloader_WithLogs and CyBootloader_Release with corresponding *.hex and *.jwt files.
   * WithLogs prints execution results to terminal.

targets/TARGET_Cypress/TARGET_PSOC6/sb-tools/prepare/example_cert.pem

@@ -0,0 +1,10 @@
+-----BEGIN CERTIFICATE-----
+MIIBTzCB9qADAgECAhQCJF8kCV5oVGofjI+lrnVsCSI+cjAKBggqhkjOPQQDAjAg
+MR4wHAYDVQQDDBVDeXByZXNzIFNlbWljb25kdWN0b3IwHhcNMTkwNzE1MTkzNzQ3
+WhcNMjAwNzE0MTkzNzQ3WjAeMRwwGgYDVQQDDBNFeGFtcGxlIGNlcnRpZmljYXRl
+MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEvfb7/jewTxpFVINcXdrZQJBArC5i
+grN0BLc783FigrP2sEFQpfOmPUDkrt/E+0Rol2x+jsmP/CwXstNktz6w86MQMA4w
+DAYDVR0TAQH/BAIwADAKBggqhkjOPQQDAgNIADBFAiEA3I3zaBbwMzSJ6xU9ngUM
+Dyk4XstQF3tLzmvBRUkX8woCICk0YiVqk4tD2wvgUYkPztBKu6tVl/OqF2Ee+aQs
+uwQc
+-----END CERTIFICATE-----