The normal firmware update procedure accepts signed firmware only. Signing is done as part of the build, or with
make sign inside
key.cfg in the top level directory specifies the private signing key (or, alternatively, that a dedicated device is to be used for signing). When run for the first time, the signing tool generates a new key and creates
key.cfg for you.