Cypress/Infineon PSoC-64 'Secure Boot' device provisioning

[PiersB]

Has anyone been able to (or even attempted to) build your own JWTs for the PSoC64 device provisioning commands?

I can use the examples (i.e. secure-blinky) and they work, but I'm having trouble getting my own JWTs (i.e., built and signed by a custom app) to be accepted during the first step of the provisioning process. There's a diagnostic indicating some internal check 'mismatch', but examining the JWT content shows the property to be present (albeit in a different location within the JSON payload from the examples). JWT keys are all EC and verify with external tools.

Interested to here from anyone else working with this device. Thanks in advance!