From 20b591df7709a5754daab8f44cf9c4d5ab1efbf6 Mon Sep 17 00:00:00 2001
From: CheungVane <zhangwenzhi3@huawei.com>
Date: Fri, 31 Mar 2023 11:19:30 +0800
Subject: [PATCH] =?UTF-8?q?=E5=A2=9E=E5=8A=A0HUKS=E5=8D=97=E5=90=91?=
 =?UTF-8?q?=E6=8E=A5=E5=8F=A3=E6=96=87=E6=A1=A3=E5=AF=B9=E4=BA=8EupgradeKe?=
 =?UTF-8?q?y=E7=9A=84=E4=BB=8B=E7=BB=8D=20Signed-off-by:=20zhangwenzhi=20<?=
 =?UTF-8?q?zhangwenzhi3@huawei.com>?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../subsystems/subsys-security-huks-guide.md  | 35 +++++++++++++++++++
 1 file changed, 35 insertions(+)

diff --git a/zh-cn/device-dev/subsystems/subsys-security-huks-guide.md b/zh-cn/device-dev/subsystems/subsys-security-huks-guide.md
index e019d62623..3d08b0c969 100644
--- a/zh-cn/device-dev/subsystems/subsys-security-huks-guide.md
+++ b/zh-cn/device-dev/subsystems/subsys-security-huks-guide.md
@@ -84,6 +84,7 @@ HUKS Core作为向应用提供密钥库能力的基础，包括密钥管理及
 | [HuksHdiGetKeyProperties()](#hukshdigetkeyproperties)        | 获取密钥属性。                              |无                            | getKeyProperties(keyAlias: string, options: HuksOptions)|
 | [HuksHdiAttestKey()](#hukshdiattestkey)        | 获取密钥证书。                              |出参要遵循certChain格式                      | attestKey(keyAlias: string, options: HuksOptions)|
 | [HuksHdiExportChipsetPlatformPublicKey()](#hukshdiexportchipsetplatformpublickey)        | 导出芯片平台级密钥对的公钥。     | 出参为ECC P256的x y轴值裸数据，各32字节                      | 无 |
+| [HuksHdiUpgradeKey()](#huksHdiUpgradeKey)        | 升级密钥文件。     | 无                      | 无 |
 
 - - -
 
@@ -602,6 +603,40 @@ HUKS Core的初始化，包括锁，加密算法库，authtoken key和根密钥
 
 - - -
 
+#### HuksHdiUpgradeKey
+
+**接口描述**
+
+升级密钥文件。当密钥文件版本号小于最新版本号时，触发该升级能力。
+
+**接口原型**
+<pre><code>int32_t (*HuksHdiUpgradeKey)(const struct HksBlob *oldKey, const struct HksParamSet *paramSet, struct HksBlob *newKey);</code></pre>
+
+<details>
+  <summary><strong>参数说明</strong></summary>
+  <pre>
+  <strong>const struct HksBlob *oldKey</strong>
+  待升级的密钥文件数据
+  <br></br>
+  <strong>const struct HksParamSet *paramSet</strong>
+  升级密钥文件数据的参数
+  <br></br>
+  <strong>struct HksBlob *newKey</strong>
+  出参，升级后的密钥文件数据
+  </pre>
+</details>
+<br></br>
+
+<details>
+  <summary><strong>返回值</strong></summary>
+
+  - HKS_SUCCESS：成功
+
+  - 其他：失败
+</details>
+
+- - -
+
 ### 开发步骤
 
 HDI接口到HUKS Core的适配在以下目录中：
-- 
GitLab