MCUXpresso Secure Provisioning ToolのトピックRe: LPC55Sx exclude flash area from security boot

LPC55Sx exclude flash area from security boot

Bebe — Mon, 17 Feb 2025 14:33:39 GMT

I'm using LPC55S16 with security boot (the security boot check is made by the NXP built in bootloader). The sb file is generated with NXP Secure Provisioning Tool. My appalication has an internal flash range which has to be modified during SW run in some cases. Is there a possibility to skip a flash area from security boot check? If yes, then can you please help me how to exclude it.

Memory layout:

0x00000000 - 0x00005200 -> security boot protected

0x00005200 - 0x00005A00 -> not security boot protected

0x00005A00 - -> security boot protected

Re: LPC55Sx exclude flash area from security boot

marek-trmac — Mon, 17 Feb 2025 15:32:57 GMT

Hi Tamas,

I'm afraid it is not possible to exclude any flash range (0x00005200 - 0x00005A00) from the secure boot validation.

If you have application located at 0x00000000 - 0x00005200, you can add additional content, which is not validated during boot. There should be API in ROM available, that can be used to validate flash, so you can call the API from you validated application to validate the rest (i.e. in your case 0x00005A00 - ).

Re: LPC55Sx exclude flash area from security boot

Bebe — Mon, 17 Feb 2025 15:47:21 GMT

Thanks Marek