# OTA Firmware Updates with ESP Privilege Separation

DevFeed: [OTA Firmware Updates with ESP Privilege Separation](<https://devfeed.tech/articles/ota-firmware-updates-with-esp-privilege-separation-13940.md>)

Original publisher: [Read original article](<https://developer.espressif.com/blog/ota-firmware-updates-with-esp-privilege-separation/>)

Author: John Lee

Published: 2023-01-29T00:00:00Z

Content type: tutorial

Language: en

Sources: [Blog on Developer Portal](<https://devfeed.tech/sources/blog-on-developer-portal.md>)

Topics: [ESP-IDF](<https://devfeed.tech/topics/esp-idf.md>), [Embedded Software Dev](<https://devfeed.tech/topics/embedded-software-dev.md>)

Tags: [blog](<https://devfeed.tech/tags/blog.md>), [business-logic](<https://devfeed.tech/tags/business-logic.md>), [esp](<https://devfeed.tech/tags/esp.md>), [esp-idf](<https://devfeed.tech/tags/esp-idf.md>), [esp-privilege-separation](<https://devfeed.tech/tags/esp-privilege-separation.md>), [esp32](<https://devfeed.tech/tags/esp32.md>), [firmware](<https://devfeed.tech/tags/firmware.md>), [firmware-update](<https://devfeed.tech/tags/firmware-update.md>), [iot](<https://devfeed.tech/tags/iot.md>), [ota](<https://devfeed.tech/tags/ota.md>), [partition](<https://devfeed.tech/tags/partition.md>), [security](<https://devfeed.tech/tags/security.md>), [updates](<https://devfeed.tech/tags/updates.md>)

## AI overview

This article explains independent over-the-air firmware updates for protected_app and user_app in ESP Privilege Separation. It describes the ESP-IDF partition layout, the user-app update workflow, background downloading, reboot handling, and optional signature verification.

## Source excerpt

Over-The-Air (OTA) firmware update is one of the most important feature of any connected device. It enables the developers to ship out new features and bug fixes by remotely updating the application. In ESP Privilege Separation, there are two applications -- protected_app and user_app for which the framework provides the ability to independently update both the application binaries. In this post we will describe the independent OTA update feature under ESP Privilege Separation.