S32K3xx Secure Boot and Secure Debug

[BhushanM]

Hello Team,

For one of our product I need to support Secure Boot and Secure Debug feature.

1. Please recommend suitable option to choose as we have Boot Loader and Application code.

2. Whether going ahead with ADKP - GMAC based verification will also validate the Integrity and Authenticity of Bootloader and Application region or only bootloader region will be verified?

3. AES key provisioning demo code or app note is required incase going with SHE or Advanced Secure boot.

Thanks,

Bhushan 

[lukaszadrapa · Accepted solution]

Hi @BhushanM 

1. Advanced secure boot mode is recommended. This mode offers more regions to be checked, so you can configure it to cover both bootloader and application.
2. Basic secure boot mode can check one region only.
3. We provide Secure Boot application note including demo projects. It can be downloaded from:
https://www.nxp.com/products/processors-and-microcontrollers/s32-automotive-platform/s32k-auto-gener...
Application note can be found here:
Documentation -> Secure Files -> Secure Boot Application note v0.1.1.0 (AN744511)
Associated demo project can be downloaded here:
Design Resources -> Software -> Secure Files -> SecureBootAppNoteDemo (SW745310)

And you can also check HSE examples in this package:
https://www.nxp.com/webapp/Download?colCode=S32K3_HSE_DemoExamples

Regards,
Lukas