S32K314 after enable SHE SECURE BOOT, device can't be connected

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

S32K314 after enable SHE SECURE BOOT, device can't be connected

3,607 Views
baichuan332
Contributor I

1. format Key Catalogs  success(nvmKeyCatalog and ramKeyCatalog_she)

2. import keys success(ecu_key and boot_mac_key)

3. config SHE secure boot

1) install SMR entry success

2) install CR entry success(Sanction in case SMR verification fails -- Disable individual keys)

3) after get attribute from hseAttrSmrCoreStatus_t, 

smrStatus[0]:1

smrStatus[1]:1

coreBootStatus[0]:0

coreBootStatus[1]:0

smrEntryInstallStatus:1

4. enable secure boot by setting BOOT_SEQ = 1 in IVT

in startup_cm7.s add these

#ifndef BOOT_SEQ_ENABLE
#define BOOT_SEQ_ENABLE (1)
#endif

#define BOOT_SEQ_SHIFT (3)

......

.section ".boot_header","ax"
.long SBAF_BOOT_MARKER /* IVT marker */
.long (CM7_0_ENABLE << CM7_0_ENABLE_SHIFT) | (CM7_1_ENABLE << CM7_1_ENABLE_SHIFT) | (BOOT_SEQ_ENABLE << BOOT_SEQ_SHIFT) /* Boot configuration word */
.long 0 /* Reserved */

5. after power cycle,device can't debug and result is like [run failed.png]

6. we used jflash to connect, the result is [connect failed.png]

Sanctions We didn't choose reset core Why did this happen?Please tell me what cause it and how to fix?

 

0 Kudos
Reply
4 Replies

3,575 Views
VaneB
NXP TechSupport
NXP TechSupport

Hi @baichuan332 

There is a possibility that you locked your MCU. To verify it, please share your initialization sequence and the operation you want to do with the MCU.

 

B.R.

VaneB

0 Kudos
Reply

3,568 Views
baichuan332
Contributor I

I don't know what did you mean.

The operation I want to do with the MCU is just enable SHE secure boot. Project and secure boot detail configuration are all provided in attachment.

The only thing I forgot to provide from my description is that the life cycle is CUST_DEL.

I want to know why this happened and how to fix it?

0 Kudos
Reply

3,528 Views
VaneB
NXP TechSupport
NXP TechSupport

Hi @baichuan332 

Are you using S32DS to debug the project? 

Some IDEs are not required to run HSE, which could cause strange behavior. 

0 Kudos
Reply

3,594 Views
baichuan332
Contributor I

I don't know why this project when I use single-step to debug, HSE response is HSE_SRV_RSP_OK. but if no, HSE response is HSE_SRV_RSP_NOT_SUPPORTED, Please help me to cover this meanwhile

0 Kudos
Reply