S32K144 JTAG lock

cancel
Showing results for 
Search instead for 
Did you mean: 

S32K144 JTAG lock

Jump to solution
1,462 Views
pranavshinde
Contributor II

Hello,

I want to securely store some data in S32K144 microcontroller.
Once the data is stored, only application running in the processor should be able to read the data and no external person should be able to read it back by reading from a memory location.

My idea was to store the data in FlexNVM and enable the JTAG lock once the data is written to FlexNVM.
Is my approach correct?
If not, please let me know if there is another way to achieve this.

 

0 Kudos
1 Solution
1,393 Views
danielmartynek
NXP TechSupport
NXP TechSupport

Hello Pranav,

Yes, this is correct.

No additional setting is required.

 

BR, Daniel

 

View solution in original post

0 Kudos
6 Replies
1,445 Views
danielmartynek
NXP TechSupport
NXP TechSupport

Hi,

The MCU is secure when the FSEC[SEC] register != 0b10.
The register is loaded from the Flash Configuration Field during system reset so that the MCU can be secure right out of the reset.

You can load the FlexNVM (DFlash) data along with the application that locks the MCU
Or you can do it later using the Backdoor key which temporarily unlocks the MCU.
The MCU is then locked again on the next system reset.

Example S32K144 Verify Backdoor Access Key S32DS1.3

 

Regards,

Daniel

0 Kudos
1,439 Views
pranavshinde
Contributor II

Hi Daniel,

I understood how to enable the security by configuring the startup code.
Is there option to do the same using processor expert tool?

0 Kudos
1,429 Views
danielmartynek
NXP TechSupport
NXP TechSupport

 

Hi,

There is no such option.

 

BR, Daniel

0 Kudos
1,404 Views
pranavshinde
Contributor II

Thanks Daniel,

 

I just want to confirm the security settings.
Below are the requirements which are intended to be taken care of,

1. JTAG should not be accessible even with the security key.
2. Mass erase should be prevented.
3. JTAG should not be accessible in normal conditions as well.

I am setting this value to FSEC register.
FSEC = 0x64

Please let me know if the setting I am using is correct and if any additional settings are required.

Thanks,
Pranav

1,394 Views
danielmartynek
NXP TechSupport
NXP TechSupport

Hello Pranav,

Yes, this is correct.

No additional setting is required.

 

BR, Daniel

 

0 Kudos
1,454 Views
TomLightning
Contributor III

Hello,

from my point of view you are not able to access the memory (RAM and Flash memory) of the controller if the debug interface is locked. Of course you have to be careful not to implement functions that allow access to data that you don't want to make public (e.g. via CAN or UART).

Tom