CY8CPROTO-064B0S3 PSoC 64 "Secure Boot" Prototyping Kit Guide, Doc. # 002-29505 Rev. *B
27
Running Code on PSoC 64 “Secure Boot” MCUs
5. Perform provisioning.
ATTENTION:
PSoC 64 supply voltage of 2.5 V is required to perform provisioning. The 2.5 V
requirement is because this step involves blowing eFuses to change the device lifecycle to
“SECURE UNCLAIMED”. If the chip is not at 2.5 V, it may cause provisioning to fail and perma-
nently lock the chip in a dead state.
What does this step do?
The “CySecureTools” provision-device API does the following steps:
■ Reads the provided policy and forms the final provisioning packet, named prov_cmd.jwt.
■ Performs the entrance exam.
■ Provisions the device by sending the prov_cmd.jwt to the PSoC 64 “Secure Boot MCU”.
Before running this step, you can modify the default policy to match your end use-case. For
most development use-cases, you don’t need to modify it.
The Entrance exam is a test routine that does the following things:
■ Verify that the Device is in the correct lifecycle stage.
■ Verify that Boot Code has not been modified/tampered.
■ Verify that User flash is empty and no code is running before any provisioning takes place.
Failing the entrance exam returns an error in the command line. If there is any firmware
running on the device, existing firmware can be erased using the tools like Cypress
Programmer.
Run the following command:
cysecuretools --target cyb06xx5 --policy ./policy/
policy_single_CM0_CM4.json provision-device
KitProg3 driver issues:
There can be sporadic issue with KitProg3 and drivers can prevent the kit from being recognized
or cause other failures during the provisioning flow. Please see the Chapter 7 of the
for information on how to resolve this.
Note:
The provisioning procedure may take several seconds. Do not disconnect or reset the
device during this procedure.
Note:
The 2.5 V voltage option is provided only for the purpose of provisioning. For normal
operation of the kit after provisioning, please load the jumper shunt on J3 at 3.3 V position
(between pin 2 and 3).