HSM Enabling Issue for MPC5748G devkit

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

HSM Enabling Issue for MPC5748G devkit

874 Views
Yousry
Contributor I

I'm facing an issue with NXP MPC5748G devkit [SPC5748GHMKU6] HSM module
With NDA 
[Security Reference manual -HSM Security Firmware Standard Package - HSM Security Firmware Basic Package] all available. 

The issue is that I managed to enable HSM through DCF record and I verified it has been enabled through SSCM_UOPS_HSE = 1 

But for HADR (HSM start address), SSCM_HSA_HADR = 0x00000000 which means that no HSM boot header available.

So I'm doubting that there's a HSM firmware flashed on my target.

Q1: How can I verify that my devkit has HSM firmware available?
Q2: what should I see in the following HSM code/Data blocks if I already have HSM firmware?

Yousry_1-1766328975976.png

Q3: In case of there's no firmware flashed on my targets, How can I get the firmware?

Specially that I already have more than 100pcs 

Q4: In case of there's firmware available, where can I find HSM start address ?

Yousry_2-1766329832674.png

 

I'm using S32ds IDE with PE micro plugin to flash and debug, and I used PKGPPC NEXUS STARTER application to load my DCF record [UTest Algorithm].

#MPC5748G #HSM 

0 Kudos
Reply
3 Replies

630 Views
lukaszadrapa
NXP TechSupport
NXP TechSupport

Hi @Yousry 

Please notice that devices with HSM firmware are provided only to approved customers (for very large quantities). Standard devices SPC5748G... do not have HSM firmware installed. Devices with HSE firmware have special part number. 

If you already don't have an agreement with NXP sales to get such devices, there's very low chance to get it. 

It’s highly recommended to select a device with HSE (Hardware Security Engine). HSE firmware is freely available for all users. S32K3 family of devices is recommended as a replacement for MPC5748G:

https://www.nxp.com/products/processors-and-microcontrollers/s32-automotive-platform/s32k-auto-gener...

Regards,

Lukas

0 Kudos
Reply

579 Views
Yousry
Contributor I

Hi @lukaszadrapa 

We already Ordered the SPC5748GHMKU6 

Yousry_0-1767178203401.png

which is mentioned in the reference manual "Order Information" section as it already has HSM 

So would you guide me to figure it out through answering the questions I asked before ?

Thanks in advance 

Regards,
Yousry

 

 

0 Kudos
Reply

489 Views
lukaszadrapa
NXP TechSupport
NXP TechSupport

I have to agree that the datasheet is confusing. I asked to clarify this in the past but it has not been updated. So, there is HSM module but there's no HSM firmware. My answer above is still valid. 

Regards,

Lukas

0 Kudos
Reply
%3CLINGO-SUB%20id%3D%22lingo-sub-2267312%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3EHSM%20Enabling%20Issue%20for%20MPC5748G%20devkit%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2267312%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3E%3CP%3EI'm%20facing%20an%20issue%20with%20NXP%20MPC5748G%20devkit%20%5BSPC5748GHMKU6%5D%20HSM%20module%3CBR%20%2F%3EWith%20NDA%26nbsp%3B%3CBR%20%2F%3E%5BSecurity%20Reference%20manual%20-HSM%20Security%20Firmware%20Standard%20Package%20-%26nbsp%3BHSM%20Security%20Firmware%20Basic%20Package%5D%20all%20available.%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20issue%20is%20that%20I%20managed%20to%20enable%20HSM%20through%20DCF%20record%20and%20I%20verified%20it%20has%20been%20enabled%20through%20SSCM_UOPS_HSE%20%3D%201%26nbsp%3B%3CBR%20%2F%3E%3CBR%20%2F%3EBut%20for%20HADR%20(HSM%20start%20address)%2C%20SSCM_HSA_HADR%20%3D%200x00000000%20which%20means%20that%20no%20HSM%20boot%20header%20available.%3CBR%20%2F%3E%3CBR%20%2F%3ESo%20I'm%20doubting%20that%20there's%20a%20HSM%20firmware%20flashed%20on%20my%20target.%3CBR%20%2F%3E%3CBR%20%2F%3EQ1%3A%20How%20can%20I%20verify%20that%20my%20devkit%20has%20HSM%20firmware%20available%3F%3CBR%20%2F%3EQ2%3A%20what%20should%20I%20see%20in%20the%20following%20HSM%20code%2FData%20blocks%20if%20I%20already%20have%20HSM%20firmware%3F%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Yousry_1-1766328975976.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%22%20image-alt%3D%22Yousry_1-1766328975976.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%22%20image-alt%3D%22Yousry_1-1766328975976.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%22%20image-alt%3D%22Yousry_1-1766328975976.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3Cspan%20class%3D%22lia-inline-image-display-wrapper%22%20image-alt%3D%22Yousry_1-1766328975976.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3Cimg%20src%3D%22https%3A%2F%2Fcommunity.nxp.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F370843iFE9456E95D0F3341%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22Yousry_1-1766328975976.png%22%20alt%3D%22Yousry_1-1766328975976.png%22%20%2F%3E%3C%2Fspan%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3EQ3%3A%20In%20case%20of%20there's%20no%20firmware%20flashed%20on%20my%20targets%2C%20How%20can%20I%20get%20the%20firmware%3F%3C%2FP%3E%3CP%3ESpecially%20that%20I%20already%20have%20more%20than%20100pcs%26nbsp%3B%3C%2FP%3E%3CP%3EQ4%3A%20In%20case%20of%20there's%20firmware%20available%2C%20where%20can%20I%20find%20HSM%20start%20address%20%3F%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Yousry_2-1766329832674.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%22%20image-alt%3D%22Yousry_2-1766329832674.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%22%20image-alt%3D%22Yousry_2-1766329832674.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%22%20image-alt%3D%22Yousry_2-1766329832674.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3Cspan%20class%3D%22lia-inline-image-display-wrapper%22%20image-alt%3D%22Yousry_2-1766329832674.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3Cimg%20src%3D%22https%3A%2F%2Fcommunity.nxp.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F370844iA9EBF2CE40E5DCF3%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22Yousry_2-1766329832674.png%22%20alt%3D%22Yousry_2-1766329832674.png%22%20%2F%3E%3C%2Fspan%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%3EI'm%20using%20S32ds%20IDE%20with%20PE%20micro%20plugin%20to%20flash%20and%20debug%2C%20and%20I%20used%20PKGPPC%20NEXUS%20STARTER%20application%20to%20load%20my%20DCF%20record%20%5BUTest%20Algorithm%5D.%3C%2FP%3E%3CP%3E%23MPC5748G%20%23HSM%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2270234%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%20translate%3D%22no%22%3ERe%3A%20HSM%20Enabling%20Issue%20for%20MPC5748G%20devkit%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2270234%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fcommunity.nxp.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F214771%22%20target%3D%22_blank%22%3E%40Yousry%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EPlease%20notice%20that%20devices%20with%20HSM%20firmware%20are%20provided%20only%20to%20approved%20customers%20(for%20very%20large%20quantities).%20Standard%20devices%20SPC5748G...%20do%20not%20have%20HSM%20firmware%20installed.%20Devices%20with%20HSE%20firmware%20have%20special%20part%20number.%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIf%20you%20already%20don't%20have%20an%20agreement%20with%20NXP%20sales%20to%20get%20such%20devices%2C%20there's%20very%20low%20chance%20to%20get%20it.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EIt%E2%80%99s%20highly%20recommended%20to%20select%20a%20device%20with%20HSE%20(Hardware%20Security%20Engine).%20HSE%20firmware%20is%20freely%20available%20for%20all%20users.%20S32K3%20family%20of%20devices%20is%20recommended%20as%20a%20replacement%20for%20MPC5748G%3A%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fwww.nxp.com%2Fproducts%2Fprocessors-and-microcontrollers%2Fs32-automotive-platform%2Fs32k-auto-general-purpose-mcus%2Fs32k3-microcontrollers-for-automotive-general-purpose%3AS32K3%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.nxp.com%2Fproducts%2Fprocessors-and-microcontrollers%2Fs32-automotive-platform%2Fs32k-auto-general-purpose-mcus%2Fs32k3-microcontrollers-for-automotive-general-purpose%3AS32K3%3C%2FA%3E%3C%2FP%3E%0A%3CP%3ERegards%2C%3C%2FP%3E%0A%3CP%3ELukas%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2270416%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%20translate%3D%22no%22%3ERe%3A%20HSM%20Enabling%20Issue%20for%20MPC5748G%20devkit%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2270416%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fcommunity.nxp.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F37795%22%20target%3D%22_blank%22%3E%40lukaszadrapa%3C%2FA%3E%26nbsp%3B%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%3CP%3EWe%20already%20Ordered%20the%26nbsp%3B%3CSPAN%3ESPC5748G%3CFONT%20size%3D%225%22%3E%3CSTRONG%3EH%3C%2FSTRONG%3E%3C%2FFONT%3EMKU6%26nbsp%3B%3CBR%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Yousry_0-1767178203401.png%22%20style%3D%22width%3A%20558px%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%22%20image-alt%3D%22Yousry_0-1767178203401.png%22%20style%3D%22width%3A%20558px%3B%22%3E%3Cspan%20class%3D%22lia-inline-image-display-wrapper%22%20image-alt%3D%22Yousry_0-1767178203401.png%22%20style%3D%22width%3A%20558px%3B%22%3E%3Cimg%20src%3D%22https%3A%2F%2Fcommunity.nxp.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F371572iEC44E01AD6BFDC9B%2Fimage-dimensions%2F558x445%3Fv%3Dv2%22%20width%3D%22558%22%20height%3D%22445%22%20role%3D%22button%22%20title%3D%22Yousry_0-1767178203401.png%22%20alt%3D%22Yousry_0-1767178203401.png%22%20%2F%3E%3C%2Fspan%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3Ewhich%20is%20mentioned%20in%20the%20reference%20manual%20%22Order%20Information%22%20section%20as%20it%20already%20has%20HSM%26nbsp%3B%3CBR%20%2F%3E%3CBR%20%2F%3ESo%20would%20you%20guide%20me%20to%20figure%20it%20out%20through%20answering%20the%20questions%20I%20asked%20before%20%3F%3CBR%20%2F%3E%3CBR%20%2F%3EThanks%20in%20advance%26nbsp%3B%3CBR%20%2F%3E%3CBR%20%2F%3ERegards%2C%3CBR%20%2F%3EYousry%3C%2FP%3E%3CBR%20%2F%3E%3CP%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2270682%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%20translate%3D%22no%22%3ERe%3A%20HSM%20Enabling%20Issue%20for%20MPC5748G%20devkit%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2270682%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3E%3CP%3EI%20have%20to%20agree%20that%20the%20datasheet%20is%20confusing.%20I%20asked%20to%20clarify%20this%20in%20the%20past%20but%20it%20has%20not%20been%20updated.%20So%2C%20there%20is%20HSM%20module%20but%20there's%20no%20HSM%20firmware.%20My%20answer%20above%20is%20still%20valid.%26nbsp%3B%3C%2FP%3E%0A%3CP%3ERegards%2C%3C%2FP%3E%0A%3CP%3ELukas%3C%2FP%3E%3C%2FLINGO-BODY%3E