S32K3

[youxi]

HI:

Our company now needs to add a new secure boot function to the product. Is there a simple secure boot routine for S32K3? The routine downloaded from the official website is too complicated, I is very difficult to understand

[lukaszadrapa]

Hi @youxi 

Let me share what we provide except HSE DEMOAPP (which is sometimes hard to read):

First of all, we provide Secure Boot application note including demo projects which explains all the steps in detail. It can be downloaded from:

https://www.nxp.com/products/processors-and-microcontrollers/s32-automotive-platform/s32k-auto-gener...

Application note can be found here:

Documentation -> Secure Files -> Secure Boot Application note v0.1.1.0 (AN744511)

Associated demo project can be downloaded here:

Design Resources -> Software -> Secure Files -> SecureBootAppNoteDemo (SW745310)

And you can also check HSE examples in this package:

https://www.nxp.com/webapp/Download?colCode=S32K3_HSE_DemoExamples

The examples can be found here after installation:

c:\NXP\S32K3_HSE_DemoExamples_1_0_0\S32K3_HSE_DemoExamples\Secure_Boot\

Regards,

Lukas

[youxi]

Hi @lukaszadrapa 

May BASIC SECURE BOOT want bootloader?

[lukaszadrapa]

It's completely up to you which secure boot mode will be used. It depends on your requirements. Generally, we recommend rather Advanced Secure Boot. SHE and Basic secure boot provides rather low protection.

Regards,

Lukas

[youxi]

Decided to do advance secure boot.  Can I install SMR to a section of flash space of 0x400000 and 0x80000 without adding AppBL?

[lukaszadrapa]

Sure, it's up to user to decide which areas will be covered. It depends on user's requirements. There are no HW or HSE restrictions.

Regards,

Lukas

[youxi]

Further super user privileges are required to install the SMR. I copied this function from the template engineering. And this function also returns the correct value when the code runs. But the SMR is never installed. The variables I need to use I have put in the no cache address. The CMAC has been generated successfully. Is there anything else to pay attention to?

[lukaszadrapa]

What's the life cycle?

Regards,

Lukas

[youxi]

Hi @lukaszadrapa 

I need your help. The current LC is CUST_DEL. Which LC can install the SMR

[youxi]

I haven't changed any of these functions and they run successfully.

[youxi]

However, the smr still cannot be installed successfully