How to use Secure JTAG for i.MXRT1020-EVK

[Min1]

Hi.

I want to use secure jtag for i.mxrt1020 evk board(SCH-29856 REV A3).

The board has PIMXRT1021DAG5A processor.

I want to confirm that i can use secure jtag with JLink Plus if I follow the below steps!

1. Remove R57, R41, R116 to enable External JTAG port

2. Confirm that boundary scan is working with JLink Plus 

3. Burn eFuse using NXP MCU Boot Utility.

3-1) Read and back-up the 64-bit “Challenge” value stored in the eFuse UUID[1,0]

3-2) Program a 56-bit (7 Bytes) secret response key in the eFuse SJC_RESP

3-3) Program 0x1 in the eFuse DAP_SJC_SWD_SEL to switch the DAP to the JTAG mode

3-4) Program 0x1 in the eFuse JTAG_SMODE to switch the SJC to Secure JTAG mode. 

3-5) Program 0x1 in the eFuse KTE_FUSE

3-6) Program 0x1 in the eFuse SJC_RESP _LOCK 

4. Connect J-Link Plus

5. Edit response Key value(Key0, Key1)  in JLink Script File to 3-2 Key value

6. Power up and reset board with the JTAG_MODE pin (GPIO_AD_B0_08) in log.1.

-> I have a question. How to modify JTAG_MODE pin to log.1 manually? Should I connect something to TP11?

7. Run JLink with edited Script file.

[jeremyzhou · Accepted solution]

Hi，

1） Are these steps correct to use Secure JTAG?

-- Yes. 

Have a great day,
TIC

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!

- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------

[jeremyzhou]

Hi,
Thank you for your interest in NXP Semiconductor products and for the opportunity to serve you.
To provide the fastest possible support, I'd highly recommend you refer to the application note.
Have a great day,
TIC

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!

- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------

[Min1]

Hello. @jeremyzhou Thank you for your answer.

However, i.MXRT1020-EVK doesn't support JTAG if I don't remove resistance.

 So I followed AN12919 manual to use Segger JLink.

But I could not use external JTAG!

I already broke 3 boards! So I have to check that my steps were correct.

Are these steps correct to use Secure JTAG?