Request for information: S32K312 MCU Secure Debug

[jeongwoo]

Hello NXP Team,

Our team is currently developing a controller using the S32K312 MCU. For the production phase, we are implementing Secure Debug and Configuration Lock features.

We have observed that when Cybersecurity is active, executing the S32_SDAP_WRITE.cmm script (provided by NXP) or entering the Secure Debug password allows temporary debugger access.

We are requesting detailed information regarding the specific changes in memory addresses and register values when the device transitions from a "Cybersecurity Enabled" state to a "Temporary Secure Debug Access" state.

Specifically, we would like to know which registers or memory-mapped locations reflect this transition. For example:

Cybersecurity Active State: e.g., Address 0x40000000 = 1 / HSM Secure Debug Register = 1

Temporary Debug Enabled State: e.g., Address 0x40000000 = 0 / HSM Secure Debug Register = 0

Could you provide a list of the relevant registers (such as those in the HSE (Hardware Security Engine) or Register Status) that indicate whether the Secure Debug session is currently authenticated and active?

Best regards,

[VaneB]

Hi @jeongwoo 

Section 82.5.7 of the S32K3xx Reference Manual (Rev. 12) describes the debug authentication sequence in detail.

Additionally, there is a dedicated application note that explains the procedure to follow in order to unlock the device. This document can be downloaded from the S32K3 product webpage under Documentation → Secure Files → S32K3xx Secure Debug Enablement Guide.

BR, VaneB