How can I ban debug interface? (FSEC)

kmh48301 — Thu, 28 Oct 2021 05:27:27 GMT

Hi. I use s32k144.

I need to ban debug interface(JTAG,SWD ... All).

I stuided the FSEC and mass erase in Reference Manual

As I understand, s32k144 can be secured from debug interface. (But I couldn't find 'Ban')

==================

According to this link : https://community.nxp.com/t5/S32K/S32k142-Device-is-Secure/m-p/1005273

I think :

Although I secure the flash by FSEC, and disable the Mass Erase, debug interface is still alive.

=================

My think is correct?

I need to completely 'Ban' the debug interface.

Please give me a little advice.

Thanks

Best Regards

Phillip

Re: How can I ban debug interface? (FSEC)

Senlent — Thu, 28 Oct 2021 06:53:01 GMT

Hi@kmh48301

You need to set FSEC->SEC !=0b10

NOTE!
If the user disables mass erase with no other means to unsecure the device (no backdoor
key and no firmware means of changing the default security options), then that device
will be permanently secured.

Know more:

It is very similar to the security features of the Kinetis family MCUs. You can refer to AN4507 Using the Kinetis Security and Flash Protection Features
https://www.nxp.com/docs/en/application-note/AN4507.pdf

BR!

Jim,

topic How can I ban debug interface? (FSEC) in S32K

How can I ban debug interface? (FSEC)

Re: How can I ban debug interface? (FSEC)