ironside_se: Rebrand from SSF to IronSide SE

[SebastianBoe]

Rename
CONFIG_PSA_SSF_CRYPTO_CLIENT
to
CONFIG_NRF_IRONSIDE_SE_PSA_SERVICES

Rename
ssf_secdom
to
ironside_se

and in general rebrand from SSF to IronSide SE.

[Copilot]

Pull Request Overview

This PR renames the PSA SSF Crypto Client configuration to use the IronSide SE naming convention. The main purpose is to align the naming with the IronSide SE architecture.

• Renamed Kconfig options from PSA_SSF_CRYPTO_CLIENT* to NRF_IRONSIDE_SE_PSA_SERVICES*
• Updated all references across configuration files, build scripts, and documentation
• Added a new header file sid.h in the psa_manifest directory to support the IronSide SE PSA services

Reviewed Changes

Copilot reviewed 59 out of 60 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
subsys/nrf_security/src/ironside_se/psa_manifest/sid.h	New header file providing PSA manifest SID definitions via IronSide SE IPC service
subsys/nrf_security/src/ironside_se/ironside_se_psa_ns_api.c	Updated comment to reference the new config option name
subsys/nrf_security/src/ironside_se/bounce_buffers.h	Updated preprocessor directives to use new config option names
subsys/nrf_security/src/ironside_se/bounce_buffers.c	Updated config reference for heap size configuration
subsys/nrf_security/src/ironside_se/Kconfig	Renamed all PSA_SSF_CRYPTO_CLIENT options to NRF_IRONSIDE_SE_PSA_SERVICES
subsys/nrf_security/src/ironside_se/CMakeLists.txt	Updated config check and simplified source path
subsys/nrf_security/src/CMakeLists.txt	Updated config check and directory reference from ssf_secdom to ironside_se
subsys/nrf_security/cmake/generate_configs.cmake	Updated config check in macro
subsys/nrf_security/Kconfig.psa	Updated source path from ssf_secdom to ironside_se
subsys/nrf_security/CMakeLists.txt	Updated config check in conditional
subsys/net/openthread/Kconfig	Updated all config references in OpenThread integration
scripts/ci/tags.yaml	Updated CI path reference
samples/mpsl/timeslot/boards/nrf54h20dk_nrf54h20_cpurad.conf	Updated config setting
samples/matter/lock/Kconfig	Updated config check
samples/matter/common/src/persistent_storage/Kconfig	Updated config checks in conditional expressions
samples/crypto//boards/.conf	Updated config settings across multiple crypto sample board configurations
samples/crypto/psa_tls/README.rst	Updated documentation references
samples/bluetooth//boards/.conf	Updated config settings across multiple Bluetooth sample board configurations
doc/nrf/links.txt	Updated documentation link reference
applications/nrf_desktop/configuration/nrf54h20dk_nrf54h20_cpuapp/images/mcuboot/*.conf	Updated config settings and comments in MCUboot configurations
.github/test-spec.yml	Updated test specification path

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[NordicBuilder]

CI Information

^{To view the history of this post, click the 'edited' button above}
Build number: 1

Inputs:

Sources:

more details

Github labels

Enabled	Name	Description
	ci-disabled	Disable the ci execution
	ci-all-test	Run all of ci, no test spec filtering will be done
	ci-force-downstream	Force execution of downstream even if twister fails
	ci-run-twister	Force run twister
	ci-run-zephyr-twister	Force run zephyr twister

List of changed files detected by CI (0)

Outputs:

Toolchain

Version:
Build docker image:

Test Spec & Results: ✅ Success; ❌ Failure; 🟠 Queued; 🟡 Progress; ◻️ Skipped; ⚠️ Quarantine

• ❌ Toolchain
• ❌ Build twister
• ❌ Integration tests

Note: This message is automatically posted and updated by the CI

[github-actions]

You can find the documentation preview for this PR here.

Preview links for modified nRF Connect SDK documents:

https://ncsdoc.z6.web.core.windows.net/PR-25487/nrf/samples/crypto/psa_tls/README.html