Getting error: ESP_ERR_NVS_NOT_INITIALIZED after turning on Secure Boot and Flash Encryption.

[peetery]

Hi!

I'm programming ESP32 using MicroPython and recently I started preparing my application for production so I turn on Secure Boot and Flash Encryption on ESP32. Before turning it on everything works perfectly fine, but right now I'm getting problem with nvs - which hadn't occured before. Connecting to the device by idf.py monitor and I get:

ets Jun  8 2016 00:22:57

rst:0xc (SW_CPU_RESET),boot:0x12 (SPI_FAST_FLASH_BOOT)
configsip: 0, SPIWP:0xee
clk_drv:0x00,q_drv:0x00,d_drv:0x00,cs0_drv:0x00,hd_drv:0x00,wp_drv:0x00
mode:DIO, clock div:2
load:0x3fff00b8,len:11992
load:0x40078000,len:27072
load:0x40080400,len:3744
0x40080400: _init at ??:?

entry 0x40080630
I (40) boot: ESP-IDF v5.0.4 2nd stage bootloader
I (40) boot: compile time 10:18:14
I (40) boot: Multicore bootloader
I (43) boot: chip revision: v1.0
I (47) boot.esp32: SPI Speed      : 40MHz
I (52) boot.esp32: SPI Mode       : DIO
I (56) boot.esp32: SPI Flash Size : 16MB
I (61) boot: Enabling RNG early entropy source...
I (66) boot: Partition Table:
I (70) boot: ## Label            Usage          Type ST Offset   Length
I (77) boot:  0 nvs              WiFi data        01 02 00011000 00006000
I (85) boot:  1 otadata          OTA data         01 00 00018000 00002000
I (92) boot:  2 phy_init         RF data          01 01 00020000 00001000
I (99) boot:  3 ota_0            OTA app          00 10 00030000 00380000
I (107) boot:  4 ota_1            OTA app          00 11 003d0000 00380000
I (115) boot:  5 vfs              Unknown data     01 81 007a0000 007dc000
I (122) boot: End of partition table
I (126) esp_image: segment 0: paddr=00030020 vaddr=3f400020 size=3d138h (250168) map
I (228) esp_image: segment 1: paddr=0006d160 vaddr=3ff80063 size=00008h (     8) load
I (229) esp_image: segment 2: paddr=0006d170 vaddr=3ffbdb60 size=02ea8h ( 11944) load
I (239) esp_image: segment 3: paddr=00070020 vaddr=400d0020 size=1121d0h (1122768) map
I (662) esp_image: segment 4: paddr=001821f8 vaddr=3ffc0a08 size=02428h (  9256) load
I (666) esp_image: segment 5: paddr=00184628 vaddr=40080000 size=1dcb4h (122036) load
I (719) esp_image: segment 6: paddr=001a22e4 vaddr=400c0000 size=00064h (   100) load
I (719) esp_image: segment 7: paddr=001a2350 vaddr=00000000 size=0dc30h ( 56368)
I (746) esp_image: Verifying image signature...
I (1091) boot: Loaded app from partition at offset 0x30000
I (1091) secure_boot_v1: bootloader secure boot is already enabled. No need to generate digest. continuing..
I (1096) boot: Checking flash encryption...
I (1101) flash_encrypt: flash encryption is enabled (3 plaintext flashes left)
I (1109) boot: Checking secure boot...
I (1114) secure_boot_v1: bootloader secure boot is already enabled, continuing..
I (1122) boot: Disabling RNG early entropy source...
�Traceback (most recent call last):
  File "main.py", line 2522, in <module>
  File "main.py", line 2474, in main
  File "main.py", line 2012, in ensure_correct_settings
  File "main.py", line 2039, in load_info
OSError: (-4353, 'ESP_ERR_NVS_NOT_INITIALIZED')
MicroPython v1.24.0-preview.183.g288a03625.dirty on 2024-11-15; Generic ESP32 module with OTA with ESP32

This error is caused because of the line:
nvs = esp32.NVS('storage')

Before turning on Secure Boot and Flash Encryption that code works perfectly fine without any troubles so I don't have any ideas what is wrong right now. In addition I didn't set any specific flags in my custom partition table to any partition, so Flash Encryption should encrypt only app partitions by default. Any ideas what's wrong?

[peetery]

From what I've read in MicroPython's documentation esp32.NVS('name') in the absence of an object creates one itself, after which NVS memory is initialized. There is no strictly method designed exclusively for NVS initialization, unless there is and I don't know about it? Thanks in advance for your help

[peetery]

It turned out that in idf.py menuconfig in Components Settings in NVS I had enabled NVS encryption. I don't have to encrypt data in NVS, because it's nothing important in there in my case so I turn it off and now everthing works fine :)