S32KのトピックRe: S32k344 secure key write with HSE SHE Specification Services

S32k344 secure key write with HSE SHE Specification Services

KrutarthRaut41 — Mon, 24 Mar 2025 07:07:08 GMT

Hello,

Is there any application note available to work with secure key write with HSE SHE Specification Services with S32k344 controller?

Re: S32k344 secure key write with HSE SHE Specification Services

lukaszadrapa — Mon, 24 Mar 2025 18:18:56 GMT

Hi @KrutarthRaut41

We don't have an application note dedicated to SHE features. There are only details included in HSE-B firmware reference manual and in HSE Service API manual. If you are looking for non-autosar examples, you can find something in HSE DEMOAPP or in HSE Demo Examples packages.
If you are looking for Crypto example, please create a new case here and I can share some example: https://support.nxp.com/s/?language=en_US

Regards,
Lukas

Re: S32k344 secure key write with HSE SHE Specification Services

KrutarthRaut41 — Tue, 01 Apr 2025 09:38:20 GMT

Hello,
I think, I am facing issue due to Lifecycle of MCU as it is in Customer delivery state. Some of the document, I see, It shall be in OEM Production.
For same, I need to update LC. Do you have any Application note for that?

Re: S32k344 secure key write with HSE SHE Specification Services

lukaszadrapa — Wed, 02 Apr 2025 05:40:59 GMT

Hi @KrutarthRaut41

You can find SW example in this package:
https://www.nxp.com/webapp/Download?colCode=S32K3_HSE_DemoExamples
After installation, search for:
c:\NXP\S32K3_HSE_DemoExamples_1_0_0\S32K3_HSE_DemoExamples\Device_Configuration\S32K344_CQC_DEMO\
Description can be found in included readme file.

Notice that if the life cycle is advanced from CUST_DEL either to OEM_PROD or to IN_FIELD, it is mandatory to use ADKP (use secure debug).
It is described in section "2.6.1.4 Debug" in HSE-B firmware reference manual v2.4.
Life cycle is then described in section "2.3.8 Life cycle (LC)".

Once secure debug is enabled, it’s necessary to configure your debugger accordingly.

If Pemicro is used, you can read this article on Pemicro site:
https://www.pemicro.com/learningcenter/contents.cfm?content_id=82
We have also this article which describes how to set the password without HSE. Last part is valid also for a case when HSE is used:
https://community.nxp.com/t5/S32K-Knowledge-Base/S32K3-Restrict-the-debug-access-with-a-password-when-HSE-is-not/ta-p/1735073

If you use debugger from Lauterbach, you can take a look at scripts in HSE DemoApp:
c:\NXP\HSE_DEMOAPP_S32K3XX_0_2_40_0\demo_security_installer\scripts\

See the files like:
debug_App_ADKP.py
debug_authorization.cmm
adkp_key_input.txt

Regards,
Lukas