Device Security
324
SLAU356I – March 2015 – Revised June 2019
Copyright © 2015–2019, Texas Instruments Incorporated
System Controller A (SYSCTL_A)
5.8.6.2
Boot Override Through Flash Mailbox
Boot overrides through the flash mailbox are used for the following functionality:
•
JTAG and SWD lock enable: To enable the JTAG and SWD lock for the device
•
IP protection enable: To enable IP protection for any combination of the four available secure zones
needed by the application
•
Factory reset: To erase the entire flash main memory. Remove all security definitions in the system.
•
Factory reset configuration: To enable a password for factory reset or to disable factory reset
functionality
•
BSL configuration: To enable or disable the BSL and to set up various BSL parameters
•
In-field update: Encrypted update for JTAG and SWD locked, encrypted update, or unencrypted update
of any of the IP protected secure zone in the device
The security settings of the MSP432P4xx devices can be configured by the boot code on the basis of a
flash based mailbox, FL_BOOTOVER_MAILBOX. This mailbox defines a series of commands and
parameters configured by the user. At the next boot, the boot-code finds the boot-override request
command in the flash mailbox and executes the command.
5.8.6.2.1
Boot Override Flash Mailbox (FL_BOOTOVER_MAILBOX)
lists the structure of the mailbox. Relative addresses are provided for the flash mailbox, because
absolute addresses are device dependent and available in the device-specific data sheet.
Table 5-1. Boot Override Flash Mailbox
Mailbox
Offset
Group
Description
Value
0x0
MB_START
Mailbox start (Has to be programed by the user for the boot
code to determine a valid flash boot override mailbox)
0x0115ACF6
0x4
GEN_PARAMS
CMD
Command for Boot override operations. To be programed
by user when setting up the flash mailbox.
0x8
Reserved
Reserved
0xFFFFFFFF
0xC
Reserved
0xFFFFFFFF
0x10
JTAG_SWD_LOCK_PARAM
S
JTAG_SWD_LOCK_SECEN
JTAG and SWD Lock Enable
Disable = 0xFFFFFFFF (default state)
Enable = 0x00000000 (Any value other than 0xFFFFFFFF)
0x14-0x20
JTAG_SWD_LOCK_AES_INIT_VECT[0-3]
JTAG and SWD lock AES initialization vector for AES-CBC
to be used for enrypted updates
0x24-0x40
JTAG_SWD_LOCK_AES_SECKEYS[0-7]
JTAG and SWD lock AES CBC security Keys 0-7. This is
the key that is used to generate the ENCPAYLOAD when
the user intends to do an upgrade.
0xFFFFFFFF when security is disabled.
0x44-0x50
JTAG_SWD_LOCK_UNENC_PWD[0-3]
JTAG and SWD lock unencrypted password
0xFFFFFFFF when security is disabled.
0x54
ACK
Acknowledgment for this command
0x58-0x5C
Reserved
Reserved