Kinetis k64 Security And protection

dotangoldberg — Mon, 04 Dec 2017 08:03:01 GMT

Hello,

I am trying to operate the security and protection capabilities in K64 following AN4507 document
Using the 16 bytes defined in startup_MK64F12.S file FlashConfig section.
It seems that the FSEC register, SEC bits value returns to 10b (not active)

Example of my configuration:

/* Flash Configuration */
.section .FlashConfig, "a"
.long 0x01020304
.long 0x05060708
.long 0xFFFFFFFF
.long 0xFFFFFFBF

After flashing the actual result is FSEC = 0xBE

In the AN it is written "If the flash memory module is unsecured using backdoor key access, the SEC field is forced to 10b"... is it related to my problem?

1. Is it possible to get a use case example of security, back door key and mass erase disable configurations?

2. I am using the kboot, so in fact the application image actually configured as follow (MK64FN1M0xxx12_flash.ld) :

/* Specify the memory areas */
MEMORY
{
m_interrupts (RX) : ORIGIN = 0x0000A000, LENGTH = 0x00000400
m_flash_config (RX) : ORIGIN = 0x0000A400, LENGTH = 0x00000010
m_text (RX) : ORIGIN = 0x0000A410, LENGTH = 0x000FFBF0
m_data (RW) : ORIGIN = 0x1FFF0000, LENGTH = 0x00010000
m_data_2 (RW) : ORIGIN = 0x20000000, LENGTH = 0x00030000
}

Apparently the 'actual' file startup_MK64F12.S is in the kboot sources...
Does is matter if the security is configured from the kboot image?
Would the security and protection function the same even if for example blhost.exe application stop the uc at the boot?

3. Is it possible to get a use case example of protection registers FPROT0–3 ? was it suitable for 'read only' section definitions in the flash (for example to store 'factory settings' data) ?

Thank you very much!

Dotan

Re: Kinetis k64 Security And protection

mjbcswitzerland — Mon, 04 Dec 2017 22:20:54 GMT

Dotan

If you are using KBOOT it is its Flash Configuration that controls the security and flash protection - any additional settings (eg. at 0xa400) are useless. They are probably there you to satisfy the code which forces them into the object file for build compatibility reasons.

You can remove them or leave them as dummy but either way they serve no real purpose and you will need to change them in KBOOT and rebuild and load that instead.

Regards

Mark

Kinetis: http://www.utasker.com/kinetis.html
Kinetis K64:
- http://www.utasker.com/kinetis/FRDM-K64F.html
- http://www.utasker.com/kinetis/TWR-K64F120M.html
- http://www.utasker.com/kinetis/TEENSY_3.5.html
- http://www.utasker.com/kinetis/Hexiwear-K64F.html

Professional Kinetis support, one-on-one training and complete fast-track project solutions: http://www.utasker.com/support.html

Kinetis MicrocontrollersのトピックKinetis k64 Security And protection

Kinetis k64 Security And protection

Re: Kinetis k64 Security And protection