#Germany #Nuremberg #firmware update #Cyber Resilience Act #Nordic Semiconductor

Nordic Semiconductor Unveils Lifetime FOTA Package

Nordic Semiconductor, a leading name in low-power wireless connectivity solutions, has made a significant leap forward by launching a lifetime Firmware Over-The-Air (FOTA) package designed to streamline compliance with the forthcoming Cyber Resilience Act (CRA) for its clients in the EU. This innovative service offers manufacturers a single, one-time payment solution that ensures firmware updates and device management throughout the lifespan of their products.

Understanding the Cyber Resilience Act

The CRA mandates that manufacturers of connected devices launched in the EU must provide security updates addressing identified vulnerabilities throughout the device's lifetime. Beginning in 2027, adherence to these regulations will become crucial for businesses to remain competitive and compliant within the market. Nordic's nRF Cloud service is engineered to help developers meet these timely updates swiftly—potentially turning a multi-month process into a matter of minutes.

François Baldassari, the vice president of software services at Nordic, acknowledges the challenges that the CRA presents, particularly emphasizing that compliance efforts are likely to complicate project timelines for manufacturers. As a proactive response to these challenges, Nordic aims to facilitate minimal disruption while ensuring security and compliance for its customers.

Features of the nRF Cloud Solution

The nRF Cloud FOTA solution is seamlessly integrated into Nordic's portfolio of low-power wireless products and is available for all Series nRF54, nRF53, and nRF52 Bluetooth® Low Energy SoCs, as well as the nRF91 cellular IoT modules. Key features of this solution include:

• - Integrated Bootloader: Built using MCUboot, the nRF Connect SDK.
• - Global FOTA Network: Optimized for low-power devices, ensuring extensive reach and reliability.
• - Turnkey Libraries: Pre-packaged libraries ready for gateway-based updates.
• - Automated Rollout: Implementing gradual deployments with analytics, fleet status monitoring, and rollback protection.
• - User-Friendly Fleet Management Console: Providing comprehensive oversight and operational control.
• - Immutable Audit Logs: Helping companies meet compliance requirements while ensuring accountability.

These features combine to create a robust platform that not only meets existing legislation but anticipates future needs as regulations evolve.

Revolutionizing FOTA Services via Unique Pricing Model

Nordic Semiconductor's new approach to FOTA stands apart from traditional models, which often require ongoing subscriptions or cumbersome custom infrastructures. By implementing a one-time payment model, the new FOTA package redefines market standards by offering sustainable updates and device management at a predictable cost.

This evolution will allow manufacturers to maintain the security of their deployed devices and facilitate upgrades without the weight of recurring costs or overwhelming complexity. François Baldassari highlights this shift as a competitive advantage, enabling manufacturers to innovate and enhance their devices iteratively over time without breaking the bank.

Leveraging Memfault for Enhanced Reliability

The nRF Cloud's FOTA solution is supported by advancements rooted in technology originally developed for Memfault, an IoT reliability platform acquired by Nordic Semiconductor in 2025. This integration ensures that the FOTA model has been tested across millions of devices, allowing customers to benefit from a proven infrastructure, refined through extensive development and real-world application.

As noted by Baldassari, leveraging this unified stack simplifies ongoing compliance with a focus on hardware, software, and service integration: "By unifying hardware components, software, and cloud services, we're enabling customers to prepare for compliance both efficiently and sustainably."

Availability and Future Outlook

The nRF Cloud FOTA service is currently available, with pricing starting at $1 per unit, contingent on fleet size and project specifications. Manufacturers are encouraged to explore this forward-thinking solution, which promises to enhance both security implementation and overall product lifecycle management.

Nordic Semiconductor will showcase this exciting new offering at the Embedded World 2026 conference from March 10-12 in Nuremberg, Hall 4A, Booth 310. Attendees can witness the FOTA solution in action and learn more about its implications for the future of connected devices.

In summary, Nordic Semiconductor's lifetime FOTA package represents an innovative step toward ensuring cybersecurity compliance, providing manufacturers a sustainable framework to address future regulatory challenges efficiently.