If i enabled security boot mode is "Strict Sequential Boot Mode",but security boot verification is failed,
now, can i disable the security boot?
if strict sequential boot mode fails, the device will never leave reset state and the only option is to replace the chip. There's no way to recover in this case.
thank you for response.
If I enable the other two modes(Sequential Boot Mode、Parallel Boot Mode),If verification fails,Can I use the debug tool to restore CSEc to factory settings
yes, you can.
Strict sequential boot mode is special one as it keeps the device in reset forever when the verification fails.
Failing sequential and parallel boot modes don't do that, you are just not able to use boot protected keys in case of verification fail. But the device is still working without other limitations.
To reset the device back to factory state, you need to know MASTER ECU KEY.
More details and SW example can be found in AN5401:
If the sequential or parallel boot mode fail, BOK bit in FCSESTAT register is cleared and you can't use boot protected keys.
See "3.1.3 Key Attributes" in AN5401 for details.
See also SW examples in the application note. When loading a key, attributes can be added when calling calculate_M1_to_M5() function. It's the last parameter.
I enabled security boot mode is "Sequential Boot Mode",
but security boot verification failed, could you please determine what went wrong?
The FCSESTAT register value is :
this means that BOOT_MAC calculated by CSE after reset does not correspond to value stored in BOOT_MAC slot.
Did you followed all the steps described in AN5401?
If you updated the content of flash, BOOT_MAC needs to be updated too. Or you can perform reset to factory state (also described in AN5401) and start over.
Now, secure boot verfication is success,i update ted secure boot area code and update BOOT MAC success,but after reset,secure boot failed,What do we need to pay attention to update BOOT MAC