optiga_psa_se.h File Reference

#include "psa/crypto.h"
#include "include/common/optiga_lib_common.h"

Go to the source code of this file.

Functions
psa_status_t	optiga_psa_register (void)
	Register OPTIGA as a PSA Secure Element driver.
void	optiga_psa_forget_all_slots (void)
void	optiga_psa_set_signing_key_oid (optiga_key_id_t oid)
	Set the OPTIGA key OID to use for TLS signing.
optiga_key_id_t	optiga_psa_get_signing_key_oid (void)
	Get the currently configured OPTIGA signing key OID.
void	optiga_psa_clear_all_slots (void)
	Clear all PSA key slots (reset internal map).

Function Documentation

optiga_psa_register()

psa_status_t optiga_psa_register

(

void

)

Register OPTIGA as a PSA Secure Element driver.

Returns

psa_status_t PSA_SUCCESS on success, error code otherwise

optiga_psa_forget_all_slots()

void optiga_psa_forget_all_slots

(

void

)

optiga_psa_set_signing_key_oid()

void optiga_psa_set_signing_key_oid

(

optiga_key_id_t

oid

)

Set the OPTIGA key OID to use for TLS signing.

Parameters

oid	Key OID (0xE0F0 for factory cert, 0xE0F1 for TESAIoT cert)

Call this BEFORE psa_generate_key() to select which key to use. Must match the certificate being used:

• Certificate 0xE0E0 (factory) -> Key 0xE0F0
• Certificate 0xE0E1 (TESAIoT) -> Key 0xE0F1

optiga_psa_get_signing_key_oid()

optiga_key_id_t optiga_psa_get_signing_key_oid

(

void

)

Get the currently configured OPTIGA signing key OID.

Returns

Current key OID

optiga_psa_clear_all_slots()

void optiga_psa_clear_all_slots

(

void

)

Clear all PSA key slots (reset internal map).

Call this after MQTT disconnect to ensure fresh state for next connection. Required when switching between MQTT test and CSR workflow to avoid TLS errors.