Name: Espressif ESP32-S2
Brand: Espressif
Rating: 5 (1 reviews)

To Next Page

To Previous Page

Chapter 4. API Guides

encrypted separately before writing.

This command will write to ﬂash memory unencrypted images: the ﬁrmware bootloader, the partition

table and applications. Once the ﬂashing is complete, ESP32-S2 will reset. On the next boot, the

ﬁrmware bootloader encrypts: the ﬁrmware bootloader, application partitions and partitions marked as

encrypted then resets. Encrypting in-place can take time, up to a minute for large partitions. After

that, the application is decrypted at runtime and executed.

If using Development Mode, then the easiest way to update and re-ﬂash binaries is Re-ﬂashing Updated Partitions.

If using Release Mode, then it is possible to pre-encrypt the binaries on the host and then ﬂash them as ciphertext.

See Manually Encrypting Files.

Re-ﬂashing Updated Partitions If you update your application code (done in plaintext) and want to re-ﬂash it,

you will need to encrypt it before ﬂashing. To encrypt the application and ﬂash it in one step, run:

idf.py encrypted-app-flash monitor

If all partitions needs to be updated in encrypted format, run:

idf.py encrypted-flash monitor

Release Mode

In Release mode, UART bootloader cannot perform ﬂash encryption operations. New plaintext images can ONLY

be downloaded using the over-the-air (OTA) scheme which will encrypt the plaintext image before writing to ﬂash.

To use this mode, take the following steps:

1. Ensure that you have an ESP32-S2 device with default ﬂash encryption eFuse settings as shown in Relevant

eFuses.

See how to check ESP32-S2 Flash Encryption Status.

2. In Project Conﬁguration Menu, do the following:

• Enable ﬂash encryption on boot

• Select Release mode (Note that once Release mode is selected, the

EFUSE_DIS_DOWNLOAD_MANUAL_ENCRYPT eFuse bit will be burned to disable ﬂash

encryption hardware in ROM Download Mode.)

• Select UART ROM download mode (Permanently switch to Secure mode (recommended)). This is

the default option, and is recommended. It is also possible to change this conﬁguration setting to

permanently disable UART ROM download mode, if this mode is not needed.

• Select the appropriate bootloader log verbosity

• Save the conﬁguration and exit.

Enabling ﬂash encryption will increase the size of bootloader, which might require updating partition table oﬀset.

See Bootloader Size.

3. Run the command given below to build and ﬂash the complete images.

idf.py flash monitor

Note: This command does not include any user ﬁles which should be written to the partitions on the

ﬂash memory. Please write them manually before running this command otherwise the ﬁles should be

encrypted separately before writing.

This command will write to ﬂash memory unencrypted images: the ﬁrmware bootloader, the partition

table and applications. Once the ﬂashing is complete, ESP32-S2 will reset. On the next boot, the

Espressif Systems 1350

Submit Document Feedback

Release v4.4

Brand	Espressif
Model	ESP32-S2
Category	Single board computers
Language	English

Espressif ESP32-S2 User Manual

Table of Contents

Questions and Answers:

Espressif ESP32-S2 Specifications