JTAG: CM7 DAP vs SJC

[spiderman]

I am reading the application note AN12419 "Secure JTAG for i.MXRT10xx".

I understand there are two interfaces for debugging:

1) CM7 DAP

2) SJC

I understand that, if I want to use Secure JTAG mode, I must use SJC and permanently disable DAP by blowing fuses KTE=1 and SJC_MODE=01. Is this correct?

Also, apart from security, what are the differences and advantages/disadvantages of CM7 DAP vs SJC?

[Omar_Anguiano · Accepted solution]

Yes, SJC_SMODE needs to be b01 and KTE_FUSE burned after this one.
SJC is used for test like boundary scan, it is also used for Secure JTAG Challenge so after successfully executing this challenge the device is able to use CM7 DAP. So they both are completely different.
Please refer to chapters 3.1 and 4 from that application note.

Best regards,
Omar