Inquiry on Secure Debug Authentication and Flash Memory Protection for S32K324 RTD 3.0.0

[Ranjith_kumar]

Hi NXP team ,

I am currently working with the NXP S32K324 microcontroller using the RTD version 3.0.0, and I would like to implement secure debug and flash memory protection features with the following requirements:

1. Secure Debug Access:

   • I want to protect the debug port by requiring password-based authentication before enabling any debug session, similar in concept to a UDS service.

   • Could you please provide recommended best practices or sample code that demonstrates how to enforce debugger authentication effectively on the S32K324 within the RTD 3.0.0 framework?

   • Guidance on integrating this authentication process into the debug workflow (e.g., with PEmicro Python scripts or equivalent) would be highly appreciated.

2. Flash Memory Protection:

   • I aim to secure the flash memory such that write or erase operations require prior authorization or security clearance.

   • If available, could you share example code or reference designs that illustrate how to implement flash write/erase locking mechanisms?

   • Insight into relevant API usage or flash configuration registers for enforcing such protection is also requested.

Kind regards,
Ranjithkumar

[VaneB]

Hi @Ranjith_kumar 

It is possible to protect JTAG access using a password, and the process varies depending on whether HSE firmware is used or not. For detailed information about both approaches, please refer to the following community threads.

Can I disable S32K3's JTAG permanently by LifeCycle configuration bit without ADKP?

[S32K3] Restrict the debug access with a password when HSE is used

Regarding the authentication process for secure debugging, PEmicro provides comprehensive guidance, including explanations and the necessary Python scripts to enable and use the secure debug feature effectively.

NXP: Using PEmicro Tools to Enable S32K3xx Secure Debug Support

For information on FLASH protection, please refer to the following threads, where this topic has been discussed.

How do I configure FLASH protection for the S32K312

Flash Protection Register

BR, VaneB