topic S32K324 HSE secure boot in S32K

S32K324 HSE secure boot

james131618 — Thu, 07 Dec 2023 03:56:58 GMT

Hello NXP team:

I am developing secure boot using HSE on S32K324.

I have installed the HSE firmware(A/B swap) on the chip and HSE module is working.(ex: can read the HSE version by service)

I wanted to familiarize how to use the HSE module, so I downloaded the sample code (S32K3XX_demo_app) from the official website and execute it.

But now I have a problem, and I describe my test steps:

1. Run the sample code(S32K3XX_demo_app), and the program stays at line 155.

2. I set the variable gRunExampleTest to APP_SECURE_BOOT_CONFIGURED in the Expressions window, and the program will enter line 241.

3. Enter the function SecureBootService(),

3-1：execute HSE_EraseKeys() return HSE_SRV_RSP_OK →

FormatKeyCatalog() return HSE_SRV_RSP_OK →

ImportSymmetricKeys() return HSE_SRV_RSP_OK

3-2：execute SecureBootConfiguration() → ConfigureBasicSecureBoot() →

Check_DebugKey_status() return HSE_SRV_RSP_NOT_ALLOWED

My qusetion: How can I make Check_DebugKey_status() return HSE_SRV_RSP_OK?

The question has troubled me for a long time.

I hope to get a reply as soon as possible.

Thanks.

Re: S32K324 HSE secure boot

lukaszadrapa — Fri, 08 Dec 2023 13:01:15 GMT

Hi @james131618

please take a look at the readme file:

c:\NXP\HSE_DEMOAPP_S32K3XX_0_2_6_0\HSE_DEMOAPP_S32K3XX_0_2_6_0_ReadMe.pdf

Section 4.2 says that Trace32 Lauterbach debugger is necessary to run the demo.

You can use user menu in the Trace32:

This demo app is not supposed to be used without Trace32. If you have Trace32, follow all the steps described in the readme file.

If you don't have trace32, take a look at this set of examples:

https://www.nxp.com/webapp/Download?colCode=S32K3_HSE_DemoExamples

Also if you are interested in Secure Boot, we provide Secure Boot application note including demo projects which explains all the steps in detail. It can be downloaded from:

https://www.nxp.com/products/processors-and-microcontrollers/s32-automotive-platform/s32k-auto-general-purpose-mcus/s32k3-microcontrollers-for-automotive-general-purpose:S32K3

Application note can be found here:

Documentation -> Secure Files -> Secure Boot Application note v0.1.1.0 (AN744511)

Associated demo project can be downloaded here:

Design Resources -> Software -> Secure Files -> SecureBootAppNoteDemo (SW745310)

Regards,

Lukas