How can I find the page that includes the Secure Keys Registry?

[Jeff-CF-Huang]

Hi Sir,

https://community.nxp.com/t5/NXP-Designs-Knowledge-Base/S32G-Host-Secure-Debug-with-Lauterbach-tool/...

Based on the information above, I want to register the UID and ADKP pair, but I can't find the configuration settings.

Best regards,
Jeff Huang

[alejandro_e]

Hello @Jeff-CF-Huang,

Thanks for reaching out to us and sorry for the late reply. About your questions, I am assuming you are looking for the procedure to flash the ADKP into the S32G chip. To do that you will need to download the HSE FW and call the respective HSE service. For reference you can check the HSE DEMO APP. You can find both by following these steps:

- Access www.nxp.com/ and login into your account. 

- Click on My account and then on Software Licensing and support

- Click con View accounts 

- You should see a page like the following with all your products

- Follow this path Automotive SW – S32G Standard Software >Automotive SW - S32G - HSE Firmware 

- Then select the version you are interested in, depending on your setup:

- For example HSE FW 0.2.64.0 SR Release for S32G2, then you can doanload both the FW and DEMO APP:

Once executed you will find all files in the installation directory.

Please let me know if you have more questions

[Jeff-CF-Huang]

Hi Alejandro,

Yes, I've followed the steps you mentioned.
Currently, I'm trying to register the ADKP on the Secure Keys page.
However, I'm encountering an issue where the message "No usable smart card detected" appears on the Secure Keys Registry page.
I'm not sure how to resolve this.

Best regards,
Jeff Huang

[alejandro_e]

Hello @Jeff-CF-Huang,

It seems that the document you shared originally does not go into the details of how to configure S32DS to debug a secured device. Please check the following post for those details:

HOWTO-Secure-Debugging-from-S32DS-IDE-with-S32-Debugger-and-S32

Please let me know if you encounter any problem while following those steps

[Jeff-CF-Huang]

Hi Alejandro,

Thank you for the additional information.
We are now using the TRACE32 instead of S32 Debugger.
I ran the script s32g-vnp-evb_sieve_sram_challenge_response.cmm located at C:\T32\demo\arm\hardware\s32g2\s32g-vnp-evb\s32g-vnp-evb-m7.

However, when I try to use volkano to register the key, I encounter an error.

Best regards,
Jeff Huang

[alejandro_e]

Hello @Jeff-CF-Huang,

My understanding is that in this part of the document it mentions that you only need to modify the cmm script:

And no manual execution of the volkano is needed. 

Why do you need to execute the volkano manually?

Thanks

[Jeff-CF-Huang]

Hi Alejandro,
Before running the CMM script, the key pair (UID + ADPK) must be registered in volcano.

At present, I consistently encounter this issue when running volcano.
The password method works correctly without volcano, but the challenge-response method requires volcano to generate the response code, which leads to the problem.

Best regards,
Jeff Huang

[alejandro_e · Accepted solution]

Hello @Jeff-CF-Huang,

Sorry for the late reply and also sorry for not understanding your request correctly at the beginning. It seems that the problem is the use of the command line, you should be able to register the secure key in S32DS, following these steps:

This will open the required view:

However, you must have a smart card, if you don't have one please check the attached presentation.

Please let me know if I understood your request correctly.