Hi,
Hope you are doing well. The correct configuration would be the second one. There is a documentation issue in the version of the User Manual.
CC_SoCU_DFLT setting defines the default access rights for corresponding debug domains.
– If bit is set, access is allowed. Otherwise access is denied.
CC_SoCU_PIN setting defines if debug authentication process can modify the access rights defined by CC_SoCU_DFLT:
– If bit is clear, access rights to corresponding debug domain are determined via debug authentication process.
– If bit is set, access right as defined CC_SoCU_DFLT cannot be altered.
– SOCU_PIN[n] = 1, SoCU_DFLT[n] = 0: This offers the highest level of restriction.
– SOCU_PIN[n] = 0, SOCU_DFLT[n] = 0/1: This setting allows debug authentication process to define access rights.
– SOCU_PIN[n] = 1, SOCU_DFLT[n] =1: This setting is lowest security level.
Hope this helps.
Best Regards,
Ricardo