Note

This repository is a fork of the McuManager iOS Library, which is no longer being supported by its original maintainer. As of 2021, we have taken ownership of the library, so all new features and bug fixes will be added here. Please, migrate your projects to point to this Git repsository in order to get future updates. See migration guide.

nRF Connect Device Manager

nRF Connect Device Manager library is compatible with McuManager (or McuMgr for short) and SUIT (shorthand for Software Update for the Internet of Things). McuManager is a management subsystem supported by nRF Connect SDK, Zephyr and Apache Mynewt. McuManager relies on its own McuBoot bootloader for secure bootstrapping after a firmware update and, uses the Simple Management Protocol, or SMP, for communication over Bluetooth LE. The SMP Transport definition for Bluetooth Low Energy, which this library implements, can be found here.

SUIT and McuManager are related, but not interchangeable. SUIT relies on its own bootloader, but communicates over the SMP Service. Additionally, SUIT supports some functionalities from McuManager, but is not guaranteed to do so. It's best to always check if a McuManager feature is supported by sending the request, rather than assuming it is.

The library provides a transport agnostic implementation of the McuManager protocol. It contains a default implementation for BLE transport.

Minimum required iOS version is 12.0, originally released in Fall of 2018.

Warning

This library, the default & main API for Device Firmware Update by Nordic Semiconductor, should not be confused with the previous protocol, NordicDFU, serviced by the Old DFU Library.

Compatible Devices

nRF52 Series	nRF53 Series	nRF54 Series	nRF91 Series

This library is designed to work with the SMP Transport over BLE. It is implemented and maintained by Nordic Semiconductor, but it should work any devices communicating via SMP Protocol. If you encounter an issue communicating with a device using any chip, not just Nordic, please file an Issue.

Library Adoption into an Existing Project (Install)

SPM or Swift Package Manager (Recommended)

In Xcode, open your root Project file. Then, switch to the Package Dependencies Tab, and hit the + button underneath your list of added Packages. A new modal window will pop-up. On the upper-right corner of this new window, there's a search box. Paste the URL for this GitHub project https://github.com/NordicSemiconductor/IOS-nRF-Connect-Device-Manager and the Add Package button should enable.

After Xcode fetches your new project dependency, you should now be able to add import iOSMcuManagerLibrary to the Swift files from where you'd like to call upon this library. And you're good to go.

CocoaPods

pod 'iOSMcuManagerLibrary'

Building the Example Project (Requires Xcode & CocoaPods)

"Cocoapods?"

Not to worry, we have you covered. Just follow the instructions here.

Instructions

First, clone the project:

git clone https://github.com/NordicSemiconductor/IOS-nRF-Connect-Device-Manager.git

Then, open the project's directory, navigate to the Example folder, and run pod install:

cd IOS-nRF-Connect-Device-Manager/
cd Example/
pod install

The output should look similar to this:

Analyzing dependencies
Downloading dependencies
Installing SwiftCBOR (0.4.4)
Installing ZIPFoundation (0.9.11)
Installing iOSMcuManagerLibrary (1.3.1)
Generating Pods project
Integrating client project
Pod installation complete! There are 2 dependencies from the Podfile and 3 total pods installed.

You should now be able to open, build & run the Example project by opening the nRF Connect Device Manager.xcworkspace file:

open nRF\ Connect\ Device\ Manager.xcworkspace

Introduction

McuManager is an application layer protocol used to manage and monitor microcontrollers running Apache Mynewt and Zephyr. More specifically, McuManager implements over-the-air (OTA) firmware upgrades, logs, stats, file-system and configuration management. Devices running SUIT as their bootloader might respond to McuManager commands, but it is not guaranteed.

Command Groups

McuManager is organized by functionality into command groups. In mcumgr-ios, command groups are called managers and extend the McuManager class. The managers (groups) implemented in mcumgr-ios are:

• DefaultManager: Contains commands relevant to the OS. This includes task and memory pool statistics, device time read & write, and device reset.
• ImageManager: Manage image state on the device and perform image uploads.
• StatsManager: Read stats from the device.
• SettingsManager: Read/Write config values on the device.
• LogManager: Collect logs from the device.
• CrashManager: Run crash tests on the device.
• RunTestManager: Runs tests on the device.
• FileSystemManager: Download/upload files from the device file system.
• BasicManager: Send 'Erase App Settings' command to the device.
• ShellManager: Send McuMgr Shell commands to the device.
• SuitManager: Send SUIT (Software Update for Internet of Things)-specific commands to the device. This applies to devices running SUIT as their bootloader.

Firmware Upgrade

Firmware upgrade is generally a four step process performed using commands from the image and default commands groups: upload, test, reset, and confirm.

This library provides FirmwareUpgradeManager as a convenience for upgrading the image running on a device. FirmwareUpgradeManager will forward McuMgr/McuBoot-specific commands to ImageManager, or redirect them to SuitManager if a SUIT upgrade procedure (such as the upload being a SUIT Envelope) is detected.

FirmwareUpgradeManager

FirmwareUpgradeManager provides an easy way to perform firmware upgrades on a device. A FirmwareUpgradeManager must be initialized with an McuMgrTransport which defines the transport scheme and device. Once initialized, FirmwareUpgradeManager can perform one firmware upgrade at a time. Firmware upgrades are started using the start(package: McuMgrPackage) function and can be paused, resumed, and canceled using pause(), resume(), and cancel() respectively.

Caution

Always make your start/pause/cancel DFU API calls from the Main Thread.

McuMgrPackage API

import iOSMcuManagerLibrary

do {
    // Initialize the BLE transport using a scanned peripheral
    let bleTransport = McuMgrBleTransport(cbPeripheral)

    // Initialize the FirmwareUpgradeManager using the transport and a delegate
    let dfuManager = FirmwareUpgradeManager(bleTransport, delegate)

    let packageURL = /* Obtain URL to the file user wants to Upload */
    let package = try McuMgrPackage(from: packageURL)

    // Start the firmware upgrade with the given package
    dfuManager.start(package: package)
} catch {
    // Package initialisation errors here.
}

This is our new, improved, all-conquering API. You create a McuMgrPackage, and you give it to the FirmwareUpgradeManager. There's no Step Three. This API supports:

• .bin file(s) (Single-Core nRF52xxx) McuMgr Application Upgrade
• .suit file(s) (Canonical nRF54xx) SUIT Upgrade
• .zip file(s)
  • DirectXIP (nRF52840) McuMgr Upgrade
  • Multi-Image (Application Core, Network Core nRF5340) McuMgr Upgrade
  • Multi-Image (Polling - Resources Required nRF54xx) SUIT Upgrade
• Custom Uploads

This is the API you should be using 99% of the time, unless you want to do something specific. For example, you want to unpack your own package, and upload only certain images / resources for specific cores, which is very rare.

Have a look at FirmwareUpgradeViewController.swift from the Example project for a more detailed usage sample.

Custom Multi-Image Upload Example

public class ImageManager: McuManager {
    
    public struct Image {
        public let image: Int
        public let slot: Int
        public let hash: Data
        public let data: Data

        /* ... */
    }
}

The above is the input type for Image-based API call, where a value of 0 for the image parameter means App Core, and an input of 1 means Net Core. These representations were originally intended for McuMgr/McuBoot based products, and not SUIT. In SUIT, there's no concept of 'image' or 'slot', so they're ignored. But to keep the same API reusable for McuMgr/McuBoot and SUIT devices, but we keep them for backwards compatibility.

For McuMgr/McuBoot, you will typically want to set it the slot parameter to 1, which is the alternate slot that is currently not in use for that specific core. Then, after upload, the firmware device will reset to swap over its slots, making the contents previously uploaded to slot 1 (now in slot 0 after the swap) as active, and vice-versa.

With the Image struct at hand, it's straightforward to make a call to start DFU for either or both cores:

import iOSMcuManagerLibrary

try {
    // Initialize the BLE transport using a scanned peripheral
    let bleTransport = McuMgrBleTransport(cbPeripheral)

    // Initialize the FirmwareUpgradeManager using the transport and a delegate
    let dfuManager = FirmwareUpgradeManager(bleTransport, delegate)

    // Build Multi-Image DFU parameters
    let appCoreData = try Data(contentsOf: appCoreFileURL)
    let appCoreDataHash = try McuMgrImage(data: appCoreData).hash
    let netCoreData = try Data(contentsOf: netCoreFileURL)
    let netCoreDataHash = try McuMgrImage(data: netCoreData).hash
    
    let images: [ImageManager.Image] = [
        (image: 0, slot: 1, hash: appCoreDataHash, data: appCoreData),
        (image: 1, slot: 1, hash: netCoreDataHash, data: netCoreData)
    ]

    // Start Multi-Image DFU firmware upgrade
    dfuManager.start(images: images)
} catch {
    // Errors here.
}

DirectXIP Provision

Whereas non-DirectXIP packages target the secondary / non-active slot, also known as slot 1 for each ImageManager.Image, special attention must be given to DirectXIP packages. Since they provide multiple hashes for the same ImageManager.Image, one for each available slot. This is because firmware supporting DirectXIP can boot from either slot, not requiring a swap. So, for DirectXIP the [ImageManager.Image] array might look closer to:

import iOSMcuManagerLibrary

try {
    /*
    Initialise transport & manager as above.
    */

    // Build DirectXIP parameters
    let appCoreSlotZeroData = try Data(contentsOf: appCoreSlotZeroURL)
    let appCoreSlotZeroHash = try McuMgrImage(data: appCoreSlotZeroData).hash
    let appCoreSlotOneData = try Data(contentsOf: appCoreSlotOneURL)
    let appCoreSlotOneHash = try McuMgrImage(data: appCoreSlotOneData).hash
    
    let directXIP: [ImageManager.Image] = [
        (image: 0, slot: 0, hash: appCoreSlotZeroHash, data: appCoreSlotZeroData),
        (image: 0, slot: 1, hash: appCoreSlotOneHash, data: appCoreSlotOneData)
    ]
    
    // Start DirectXIP Firmware Upgrade
    dfuManager.start(images: directXIP)
} catch {
    // Errors here.
}

Multi-Image DFU Format

Usually, when performing Multi-Image DFU, and even SUIT updates, the delivery format of the attached images for each core will be in a .zip file. This is because the .zip file allows us to bundle the necessary information, including the images for each core and which image should be uploaded to each core. This association between the image files, usually in .bin format, and which core they should be uploaded to, is written in a mandatory JSON format called the Manifest. This manifest.json is generated by our nRF Connect SDK as part of our Zephyr build system, as documented here. You can look at the McuMgrManifest struct definition within the library for an insight into the information contained within the manifest.

To bridge the gap between the Custom Image Upload API and the output from our Zephyr build system, we wrote McuMgrPackage, which takes a URL in its init() function. Because of the JSON Manifest Parsing nature of the McuMgrPackage method, you might encounter corner cases / crashes. If you find these, please report them back to us. But regardless, the McuMgrPackage shortcut is a wrapper that initialises the aforementioned [ImageManager.Image] array API. So you can always fallback to that.

Tell me about SUIT

SUIT, unlike McuManager, places a lot of the logic (read: blame) for firmware update onto the target device rather than the sender (aka 'you', the API user). This simplifies the internal process, but also makes parsing the raw Data and its contents much more complicated. For example, we can't ascertain the proper Hash signature of every component (file) sent to the firmware because rather than a fixed binary for each Slot or Core, SUIT is designed to represent a sequence of instructions for the bootloader to execute. This means the hashes for the final binaries to be flashed change on-the-fly during the firmware update on the target device's end.

From the sender's perspective, we only need to send "the Data" in full, and allow the target to figure things out. This pack of bytes represents what we call the SUIT Envelope, which is the sequence of instructions for the firmware to run, akin to the code we write before feeding it into a compiler. These instructions might require other files outside the Envelope itself, known as resources, which will be requested via API Callback. These resources are usually part of a .zip package that includes the SUIT Envelope and a Manifest file derivative from McuManager's.

Note

Resources don't need to have a valid Hash attached to them since, as explained above, only the target device knows the proper Hash. But the Envelope's Hash is required, and it supports different Modes, also known as Types or Algorithms. The list of SUIT Algorithms includes SHA256, SHAKE128, SHA384, SHA512 and SHAKE256. Of these, the only currently supported mode is SHA256.

Here's sample code in case you'd like to set up a SUIT upgrade using the ImageManager.Image API:

import iOSMcuManagerLibrary

do {
    // Initialize the BLE transport using a scanned peripheral
    let bleTransport = McuMgrBleTransport(cbPeripheral)

    // Initialize the FirmwareUpgradeManager using the transport and a delegate
    let dfuManager = FirmwareUpgradeManager(bleTransport, delegate)

    // Parse McuMgrSuitEnvelope from File URL
    let envelope = try McuMgrSuitEnvelope(from: dfuSuitEnvelopeUrl)

    // Look for valid Algorithm Hash 
    guard let sha256Hash = envelope.digest.hash(for: .sha256) else {
        throw McuMgrSuitParseError.supportedAlgorithmNotFound
    }

    let suitImage = ImageManager.Image(image: 0, hash: sha256Hash, data: envelope.data)
    try dfuManager.start(images: [suitImage])
} catch {
    // Handle errors from McuMgrSuitEnvelope init, start() API call, etc.
}

SuitFirmwareUpgradeDelegate

The delegate type you usually give FirmwareUpgradeManager is FirmwareUpgradeDelegate. This will cover any needs for McuMgr/McuBoot upgrades, as well as the 'Canonical' variant of SUIT, meaning only the Envelope needs to be sent. However, when the upgrade file is a .zip file, there might be additional resources, such as files, that the target firmware might request. When this happens, a SuitFirmwareUpgradeDelegate, an extension of FirmwareUpgradeDelegate, is required. SuitFirmwareUpgradeDelegate adds a new function to inform you of when a resource is needed. Most of the time, the requested resource will be part of the .zip package, so it'll be a very simple implementation. Here's an example:

func uploadRequestsResource(_ resource: FirmwareUpgradeResource) {
    let image: ImageManager.Image! = package?.image(forResource: resource)
    firmwareUpgradeManager.uploadResource(resource, data: image.data)
}

Firmware Upgrade Mode

McuManager firmware upgrades can be performed following slightly different procedures. These different upgrade modes determine the commands sent after the upload step. FirmwareUpgradeManager can be configured to perform these upgrade variations by setting the upgradeMode in FirmwareUpgradeManager's configuration property, explained below. (NOTE: this was previously set with mode property of FirmwareUpgradeManager, now removed) The different firmware upgrade modes are as follows:

• .testAndConfirm: This mode is the default and recommended mode for performing upgrades due to it's ability to recover from a bad firmware upgrade. The process for this mode is upload, test, reset, confirm.
• .confirmOnly: This mode is not recommended, except for Multi-Image DFU where it is the only supported mode. If the device fails to boot into the new image, it will not be able to recover and will need to be re-flashed. The process for this mode is upload, confirm, reset.
• .testOnly: This mode is useful if you want to run tests on the new image running before confirming it manually as the primary boot image. The process for this mode is upload, test, reset.
• .uploadOnly: This is a very particular mode. It does not listen or acknowledge Bootloader Info, and plows through the upgrade process with just upload followed by reset. That's it. It is up to the user, since this is not a default, to decide this is the right mode to use.

Firmware Upgrade State

FirmwareUpgradeManager acts as a simple, mostly linear state machine which is determined by the mode. As the manager moves through the firmware upgrade process, state changes are provided through the FirmwareUpgradeDelegate's upgradeStateDidChange method.

FirmwareUpgradeManager contains an additional state, validate, which precedes the upload. The validate state checks the current image state of the device in an attempt to bypass certain states of the firmware upgrade. For example, if the image to upgrade to already exists in slot 1 on the device, FirmwareUpgradeManager will skip upload and move directly to test (or confirm if .confirmOnly mode has been set) from validate. If the uploaded image is already active, and confirmed in slot 0, the upgrade will succeed immediately. In short, the validate state makes it easy to reattempt an upgrade without needing to re-upload the image or manually determine where to start.

Firmware Upgrade Configuration

In version 1.2, new features were introduced to speed-up the Upload speeds, mirroring the work first done on the Android side, and they're all available through the new FirmwareUpgradeConfiguration struct.

• pipelineDepth: (Represented as 'Number of Buffers' in the Example App UI.) For values larger than 1, this enables the SMP Pipelining feature. It means multiple write packets are sent concurrently, thereby providing a large speed increase the higher the number of buffers the receiving device is configured with. Set to 1 (Number of Buffers = Disabled) by default.
• byteAlignment: This is required when used in conjunction with SMP Pipelining. By fixing the size of each chunk of Data sent for the Firmware Upgrade, we can predict the receiving device's offset jumps and therefore smoothly send multiple Data packets at the same time. When SMP Pipelining is not being used (pipelineDepth set to 1), the library still performs Byte Alignment if set, but it is not required for updates to work. Set to ImageUploadAlignment.disabled by default.
• reassemblyBufferSize: SMP Reassembly is another speed-improving feature. It works on devices running NCS 2.0 firmware or later, and is self-adjusting. Before the Upload starts, a request is sent via DefaultManager asking for MCU Manager Paremeters. If received, it means the firmware can accept data in chunks larger than the MTU Size, therefore also increasing speed. This property will reflect the size of the buffer on the receiving device, and the McuMgrBleTransport will be set to chunk the data down within the same Sequence Number, keeping each packet transmission within the MTU boundaries. There is no work required for SMP Reassembly to work - on devices not supporting it, the MCU Manager Paremeters request will fail, and the Upload will proceed assuming no reassembly capabilities. Must not be larger than UInt16.max (65535)
• eraseAppSettings: This is not a speed-related feature. Instead, setting this to true means all app data on the device, including Bond Information, Number of Steps, Login or anything else are all erased. If there are any major data changes to the new firmware after the update, like a complete change of functionality or a new update with different save structures, this is recommended. Set to false by default.
• upgradeMode: Firmware Upgrade Mode. See Section above for an in-depth explanation of all possible Upgrade Modes.
• bootloaderMode: The Bootloader Mode is not necessarily intended to be a setting. It behaves as a setting if the target firmware does not offer a valid response to Bootloader Info request, for example, if it's not supported. What it does is inform iOSMcuMgrLibrary of the supported operations by the Bootloader. For example, if upgradeMode is set to confirmOnly but the Bootloader is in DirectXIP with no Revert mode, sending a Confirm command will be returned with an error. Which means, no Confirm command will be sent, despite the upgradeMode being set so. So yes, it's yet another layer of complexity from SMP / McuManager we have to deal with.

Configuration Example

This is the way to start DFU with your own custom FirmwareUpgradeConfiguration:

import iOSMcuManagerLibrary

// Setup
let bleTransport = McuMgrBleTransport(cbPeripheral)
let dfuManager = FirmwareUpgradeManager(bleTransport, delegate)

// Non-Pipelined Example
let nonPipelinedConfiguration = FirmwareUpgradeConfiguration(
    estimatedSwapTime: 10.0, eraseAppSettings: false, pipelineDepth: 2,
)
dfuManager.start(package: package, using: nonPipelinedConfiguration)

// Pipelined Example
let pipelinedConfiguration = FirmwareUpgradeConfiguration(
    estimatedSwapTime: 10.0, eraseAppSettings: true, pipelineDepth: 4,
    byteAlignment: .fourByte
)
dfuManager.start(package: package, using: pipelinedConfiguration)

Logging

Setting logDelegate property in a manager gives access to low level logs, that can help debugging both the app and your device. Messages are logged on 6 log levels, from .debug to .error, and additionally contain a McuMgrLogCategory, which identifies the originating component. Additionally, the logDelegate property of McuMgrBleTransport provides access to the BLE Transport logs.

Example

import iOSMcuManagerLibrary

// Initialize the BLE transport using a scanned peripheral
let bleTransport = McuMgrBleTransport(cbPeripheral)
bleTransport.logDelegate = UIApplication.shared.delegate as? McuMgrLogDelegate

// Initialize the DeviceManager using the transport and a delegate
let deviceManager = DeviceManager(bleTransport, delegate)
deviceManager.logDelegate = UIApplication.shared.delegate as? McuMgrLogDelegate

// Send echo
deviceManger.echo("Hello World!", callback)

OSLog integration

McuMgrLogDelegate can be easily integrated with the Unified Logging System. An example is provided in the example app in the AppDelegate.swift. A McuMgrLogLevel extension that can be found in that file translates the log level to one of OSLogType levels. Similarly, McuMgrLogCategory extension converts the category to OSLog type.

Related Projects

We've heard demand from developers for a single McuMgr DFU library to target multiple platforms. So we've made available a Flutter library that acts as a wrapper for both Android and iOS.