Device Security
330
SLAU356I – March 2015 – Revised June 2019
Copyright © 2015–2019, Texas Instruments Incorporated
System Controller A (SYSCTL_A)
Table 5-3. Commands Used by Boot-Code for Boot Override (continued)
CMD
Value
Both JTAG and Flash Mailbox Based Override Mode
Others
All other values not defined for the override mode.
Table 5-4. ACKs Used by Boot-Code to Indicate Status of Boot Override
ACK
Value
BUSY
0x00000001
SUCCESS
0x00000ACE
WAIT_FOR_PASSWD
0x00000002
PASSWD_PARTIAL0
0x00010004
PASSWD_PARTIAL1
0x00020004
PASSWD_PARTIAL2
0x00040004
PASSWD_PARTIAL3
0x00080004
ERROR (JTAG based command)
0xDEAD0000
ERROR (Mailbox based command)
0x0000DEAD
DEFAULT
0xFFFFFFFF
The following is an example of boot-override setting.
Assuming that the user wants to enable the IP protection for secure zone 0 on the device, the application
must set up the FL_BOOTOVER_MAILBOX with the following structure:
•
MB_START= 0x0115ACF6
•
CMD = SEC_ZONE0_EN
•
SEC_ZONE0_PARAMS
→
ACK = 0xFFFFFFFF
•
SEC_ZONE0_PARAMS
→
SEC_ZONE0_SECEN = ENABLE
•
SEC_ZONE0_PARAMS
→
SEC_ZONE0_START_ADDR = Start address of the secure zone
•
SEC_ZONE0_PARAMS
→
SEC_ZONE0_LENGTH = Length of the secure zone
•
SEC_ZONE0_PARAMS
→
SEC_ZONE0_DATA_EN =
DISABLE (if data reads from IP protected secure zone should be completely disabled)
ENABLE (if data reads from IP protected secure zone should be permitted based on the unlock
conditions in SYS_SECDATA_UNLOCK register)
•
SEC_ZONE0_PARAMS
→
SEC_ZONE0_ENCUPDATE_EN =
ENABLE (if encrypted update to the IP protected zone is desired)
DISABLE (if unencrypted update to the IP protected zone is desired)
•
All other locations = 0xFFFFFFFF
•
MB_END = 0x0011E11D
At the next device boot, the boot code processes the boot-override sequence. After the execution of the
override command, the boot code writes the command programed in the mailbox to NONE and reboots
the device. If the boot-override ACK field has a value of 0xACE, the device is secured with IP protection.