Secure Boot Implementation without Secure Access Files

[addisonaudette1]

Is there a way to run a secure boot on an S32k board without the secure access files? If so - how would that be accomplished?

[Robin_Shen]

Hi

Please allow me to directly paste the reply I gave you for Case 00999901 here.

I may not have understood your question. Please correct me if I'm wrong.
It seems you have a misunderstanding about Secure Access Rights.
Once you obtain Secure Access Rights, it doesn't just provide Secure Boot-related materials; it also grants you access to Secure Resources. I suggest you read the Secure Access Rights FAQs for more information.

Based on your description, it seems you have already obtained Secure Access Rights. In that case, you can search for relevant information by clicking Secure on the S32K3 documentation website and entering keywords. For example input boot:

If you do not have Secure Access Rights, you cannot even download RM00286 HSE-B Firmware Reference Manual - V2.7 [RM758227]. S32K3's Secure Boot uses a boot integrity/authenticity verification mechanism based on HSE (Hardware Security Engine). Without this document, it will be very difficult for you to become familiar with HSE.

Regarding Secure Boot, I also recommend you read the discussion here: https://community.nxp.com/t5/S32K/S32K3/td-p/1735306

Advanced secure boot mode is recommended. This mode offers more regions to be checked, so you can configure it to cover both bootloader and application.
Basic secure boot mode can check one region only.

Best Regards,
Robin

[addisonaudette1]

Hello, 

I do not have secure access rights. I understand that these secure access files cover more than just the documentation regarding HSE/Secure boot. 

I am under the understanding you need secure access rights to get access to:

• The HSE-B Firmware Reference Manual 
• The Secure Boot Application Note (AN744511) and its demo project.
• The HSE Firmware package itself

I also know that the HSE Standard FW library is accessible without secure access rights.

Is it possible to run a secure boot on the board without access to the secure access rights?

[Robin_Shen]

Q: Is it possible to run a secure boot on the board without access to secure access rights?
A: The chip does not come with HSE firmware installed by default. If you cannot download and install HSE firmware on the S32K3, then Secure Boot will definitely not be able to run.

I see you previously applied for Secure Access Rights. Please continue to stay in touch with my colleagues to ensure you receive Secure Access Rights.