RT1015 force to use BEE XIP image

[kensu]

Hi

I can run BEE XIP image on RT1015 EVK,

But I found one thing,

Even I pull high the "GPIO_EMC_18", and I download the Non-BEE XIP image,

The code is still run successfully.

Is there any method to force RT1015 only to run BEE XIP image? 

Regards

Ken

[jay_heng · Accepted solution]

We cannot force ROM to boot encrypted image only even EncryptedXip bit is set.

[jeremyzhou]

Thanks for your reply.
To provide the fastest possible support, I'd highly recommend you to refer to the application note to learn how to enable the BEE XIP.
Have a great day,
TIC

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!

- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------

[mjbcswitzerland]

Hi

You can use the eFUSE setting to disable the GPIO override so that non-BEE-encrypted code can not be executed. You also need to program eFUSEs to disable ISP access to keys and use of the JTAG if you want to correctly secure a product.

See below for links to the uTasker boot-loader loader concept which automates security and clone protection without the need to manage eFuse keys (compatible on all i.MX RT 10xx parts, including i.MX RT1011 with OTFAD).

Regards

Mark
[uTasker project developer for Kinetis and i.MX RT]
Contact me by personal message or on the uTasker web site to discuss professional training, solutions to problems or rapid product development requirements

For professionals searching for faster, problem-free Kinetis and i.MX RT 10xx developments the uTasker project holds the key: https://www.utasker.com/iMX/RT1015.html

- i.MX RT 1015: https://www.utasker.com/iMX/RT1015.html
- Boot loader concept including XiP on-the-fly decryption, clone protection or AES256 protected RAM execution.
-- Boot Loader concept flow chart: https://www.utasker.com/docs/iMX/Loader.pdf and usage reference https://www.utasker.com/docs/iMX/uTaskerLoader_TestDrive.pdf
-- Serial Loader features: https://www.utasker.com/docs/uTasker/uTaskerSerialLoader.pdf
-- Building the loader with MCUXpresso: https://www.utasker.com/docs/iMX/MCUXpresso.pdf (and video guide https://youtu.be/p_eUGo6GypY ) - the guide document explains how to use with any application (eg. SDK) and to enabling its operation with On-The-Fly decryption in 5 minutes
-- Building the loader with IAR: https://www.utasker.com/docs/iMX/IAR.pdf (and video guide https://youtu.be/XPCwVndP99s )
-- Building the loader with VisualStudio and GCC: https://www.utasker.com/docs/iMX/GCC.pdf (and video guide https://youtu.be/0UzLLSXABK8 )
Video Guide to encrypting NXP SDK examples to run from XiP memory using on-the-fly decryption and uploading with the µTasker loader: https://www.youtube.com/watch?v=5iT7KP691ls&list=PLWKlVb_MqDQEOCnsNOJO8gd3jDCwiyKKe&index=10
Video Guide to encrypting NXP SDK examples to run at optimal speed in internal RAM and uploading with the µTasker loader:
https://www.youtube.com/watch?v=fnfLQ-nbscI&list=PLWKlVb_MqDQEOCnsNOJO8gd3jDCwiyKKe&index=11
Video Guide for Embedded Artist OEM Module for i.MX RT 1062 showing precise secured application operation analysis: https://youtu.be/o7hQbOqhJoc

[jeremyzhou]

Hi,
Thank you for your interest in NXP Semiconductor products and for the opportunity to serve you.
For me, the phenomenon doesn't make sense, the BEE XIP should work once enabled.
So I was wondering if you can demonstrate the steps of configuring BEE XIP boot, it may help me to figure it out.
Have a great day,
TIC

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!

- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------

[kensu]

Hi

Do you have comment why my configuration is able to run non-BEE XIP image?

1. Set Boot mode to internal boot.

2. Set GPIO_EMC_18 to High.

(The eFuse "BT_FUSE_SEL" is 0).

Regards

Ken

[kensu]

Hi,

The step is very easy.

GPIO_EMC_18 is switch to "ON".

Use EVK board and SDK sample.(evkmimxrt1015_iled_blinky).

After build the SDK, and convert to bin file.

Drag the bin file to RT1015-EVK disk on windows.

After Reset, the LED is blinking.

Regards

Ken