S32k344 secure key write with HSE SHE Specification Services

[KrutarthRaut41]

Hello,

Is there any application note available to work with secure key write with HSE SHE Specification Services with S32k344 controller?

[lukaszadrapa]

Hi @KrutarthRaut41 

We don't have an application note dedicated to SHE features. There are only details included in HSE-B firmware reference manual and in HSE Service API manual. If you are looking for non-autosar examples, you can find something in HSE DEMOAPP or in HSE Demo Examples packages.
If you are looking for Crypto example, please create a new case here and I can share some example: https://support.nxp.com/s/?language=en_US

Regards,
Lukas

[KrutarthRaut41]

Hello,
I think, I am facing issue due to Lifecycle of MCU as it is in Customer delivery state. Some of the document, I see, It shall be in OEM Production.
For same, I need to update LC. Do you have any Application note for that?

[lukaszadrapa]

Hi @KrutarthRaut41 

You can find SW example in this package:
https://www.nxp.com/webapp/Download?colCode=S32K3_HSE_DemoExamples
After installation, search for:
c:\NXP\S32K3_HSE_DemoExamples_1_0_0\S32K3_HSE_DemoExamples\Device_Configuration\S32K344_CQC_DEMO\
Description can be found in included readme file.

Notice that if the life cycle is advanced from CUST_DEL either to OEM_PROD or to IN_FIELD, it is mandatory to use ADKP (use secure debug).
It is described in section "2.6.1.4 Debug" in HSE-B firmware reference manual v2.4.
Life cycle is then described in section "2.3.8 Life cycle (LC)".

Once secure debug is enabled, it’s necessary to configure your debugger accordingly.

If Pemicro is used, you can read this article on Pemicro site:
https://www.pemicro.com/learningcenter/contents.cfm?content_id=82
We have also this article which describes how to set the password without HSE. Last part is valid also for a case when HSE is used:
https://community.nxp.com/t5/S32K-Knowledge-Base/S32K3-Restrict-the-debug-access-with-a-password-whe...

If you use debugger from Lauterbach, you can take a look at scripts in HSE DemoApp:
c:\NXP\HSE_DEMOAPP_S32K3XX_0_2_40_0\demo_security_installer\scripts\

See the files like:
debug_App_ADKP.py
debug_authorization.cmm
adkp_key_input.txt

Regards,
Lukas