S32K中的主题 Re: [Security] Clear ALL Keys

[Security] Clear ALL Keys

Gideon — Mon, 20 May 2024 08:14:59 GMT

Dear NXPs：

uSFE = false;

The Key attribute of MASTER_ECE_KEY is set to: Write Prot = 0; Boot Prot = 1; Debugger Prot = 1; KeyUsage = 1; Wild card = 1;

Then I want to call the bool eraseKeys(void) interface (csec_utils.h) to Clear all keys. But when

The bool getUID(uint8_t *uid) function returned a STATUS_SEC_KEY_NOT_AVAILABLE error when calling the CSEC_DRV_GetID interface. What should I do to erase all keys?

Re: [Security] Clear ALL Keys

lukaszadrapa — Tue, 21 May 2024 11:53:14 GMT

Hi @Gideon

it makes sense. If you used: Boot Prot = 1; Debugger Prot = 1;

... then:

So, the secure boot must be successful and debugger can't be connected to be able to use the key.

Regards,

Lukas

Re: [Security] Clear ALL Keys

Gideon — Thu, 23 May 2024 06:24:05 GMT

Dear lukaszadrapa:

Got it, thanks for the reply. Is there any way I can erase all keys?