How can I ban debug interface? (FSEC)

[kmh48301]

Hi. I use s32k144.

I need to ban debug interface(JTAG,SWD ... All).

I stuided the FSEC and mass erase in Reference Manual

As I understand, s32k144 can be secured from debug interface. (But I couldn't find 'Ban')

==================

According to this link : https://community.nxp.com/t5/S32K/S32k142-Device-is-Secure/m-p/1005273

I think :

Although I secure the flash by FSEC, and disable the Mass Erase, debug interface is still alive.

=================

My think is correct?

I need to completely 'Ban' the debug interface.

Please give me a little advice.

Thanks

Best Regards

Phillip

[Senlent · Accepted solution]

Hi@kmh48301

You need to set FSEC->SEC !=0b10

NOTE!
        If the user disables mass erase with no other means to unsecure the device (no backdoor
key and no firmware means of changing the default security options), then that device
will be permanently secured.

Know more:

   It is very similar to the security features of the Kinetis family MCUs. You can refer to AN4507 Using the Kinetis Security and Flash Protection Features 
   https://www.nxp.com/docs/en/application-note/AN4507.pdf

BR!

     Jim,