[Security] Clear ALL Keys

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

[Security] Clear ALL Keys

Jump to solution
3,527 Views
Gideon
Contributor III

Dear NXPs:

uSFE = false;

The Key attribute of MASTER_ECE_KEY is set to: Write Prot = 0; Boot Prot = 1; Debugger Prot = 1; KeyUsage = 1; Wild card = 1;

Then I want to call the bool eraseKeys(void) interface (csec_utils.h) to Clear all keys. But when

The bool getUID(uint8_t *uid) function returned a STATUS_SEC_KEY_NOT_AVAILABLE error when calling the CSEC_DRV_GetID interface. What should I do to erase all keys?

0 Kudos
Reply
1 Solution
3,506 Views
lukaszadrapa
NXP TechSupport
NXP TechSupport

Hi @Gideon 

it makes sense. If you used: Boot Prot = 1; Debugger Prot = 1;

... then:

lukaszadrapa_0-1716292349255.png

 

So, the secure boot must be successful and debugger can't be connected to be able to use the key.

Regards,

Lukas

View solution in original post

0 Kudos
Reply
2 Replies
3,507 Views
lukaszadrapa
NXP TechSupport
NXP TechSupport

Hi @Gideon 

it makes sense. If you used: Boot Prot = 1; Debugger Prot = 1;

... then:

lukaszadrapa_0-1716292349255.png

 

So, the secure boot must be successful and debugger can't be connected to be able to use the key.

Regards,

Lukas

0 Kudos
Reply
3,478 Views
Gideon
Contributor III

Dear lukaszadrapa:

Got it, thanks for the reply. Is there any way I can erase all keys?

0 Kudos
Reply
%3CLINGO-SUB%20id%3D%22lingo-sub-1868700%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3E%5BSecurity%5D%20Clear%20ALL%20Keys%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1868700%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3E%3CP%3EDear%20NXPs%EF%BC%9A%3C%2FP%3E%3CDIV%3E%3CDIV%3E%3CSPAN%3EuSFE%20%3D%20false%3B%3C%2FSPAN%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%3E%3CP%3EThe%20Key%20attribute%20of%20MASTER_ECE_KEY%20is%20set%20to%3A%20Write%20Prot%20%3D%200%3B%20Boot%20Prot%20%3D%201%3B%20Debugger%20Prot%20%3D%201%3B%20KeyUsage%20%3D%201%3B%20Wild%20card%20%3D%201%3B%3C%2FP%3E%3CP%3EThen%20I%20want%20to%20call%20the%20bool%20eraseKeys(void)%20interface%20(csec_utils.h)%20to%20Clear%20all%20keys.%20But%20when%3C%2FP%3E%3CP%3EThe%20bool%20getUID(uint8_t%20*uid)%20function%20returned%20a%20STATUS_SEC_KEY_NOT_AVAILABLE%20error%20when%20calling%20the%20CSEC_DRV_GetID%20interface.%20What%20should%20I%20do%20to%20erase%20all%20keys%3F%3C%2FP%3E%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1871652%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3ERe%3A%20%5BSecurity%5D%20Clear%20ALL%20Keys%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1871652%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3E%3CP%3EDear%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fcommunity.nxp.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F37795%22%20target%3D%22_self%22%3E%3CSPAN%20class%3D%22%22%3Elukaszadrapa%3C%2FSPAN%3E%3C%2FA%3E%3A%3C%2FP%3E%3CP%3E%3CSPAN%3EGot%20it%2C%20thanks%20for%20the%20reply.%20Is%20there%20any%20way%20I%20can%20erase%20all%20keys%3F%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1869714%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3ERe%3A%20%5BSecurity%5D%20Clear%20ALL%20Keys%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1869714%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Fcommunity.nxp.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F218898%22%20target%3D%22_blank%22%3E%40Gideon%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Eit%20makes%20sense.%20If%20you%20used%3A%20Boot%20Prot%20%3D%201%3B%20Debugger%20Prot%20%3D%201%3B%3C%2FP%3E%0A%3CP%3E...%20then%3A%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22lukaszadrapa_0-1716292349255.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3Cspan%20class%3D%22lia-inline-image-display-wrapper%22%20image-alt%3D%22lukaszadrapa_0-1716292349255.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3Cimg%20src%3D%22https%3A%2F%2Fcommunity.nxp.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F279854i804DB3098417D144%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22lukaszadrapa_0-1716292349255.png%22%20alt%3D%22lukaszadrapa_0-1716292349255.png%22%20%2F%3E%3C%2Fspan%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CBR%20%2F%3E%0A%3CP%3ESo%2C%20the%20secure%20boot%20must%20be%20successful%20and%20debugger%20can't%20be%20connected%20to%20be%20able%20to%20use%20the%20key.%3C%2FP%3E%0A%3CP%3ERegards%2C%3C%2FP%3E%0A%3CP%3ELukas%3C%2FP%3E%3C%2FLINGO-BODY%3E