You need to change step 3 to load that generated otp_config.json file onto the device, using `picotool otp load otp_config.json` - see section 5.10.1 in the datasheet (and section 10.5 for more detail, and other things you may want to set in step 4). This loads the bootkey in addition to enabling secure boot, which is required for secure boot to work.
Statistics: Posted by will-v-pi — Tue Feb 10, 2026 9:58 am