We have a setup with secure boot running (RCW[SB_EN] = 1) with our custom boot code on LS1046ARDB using Flow B outlined in LSDK Documentation. We would like to test authentication failure case where the board is put into a reset loop (SSM_STATE is soft fail) without blowing ITS Fuse.
- We are unable to write to HPSVCR register in SecMon to set the auth failure as a fatal security violation. Any write operation using debug access results in no change of register value. How can we write to this register?
- We are also trying to provide an alternate boot image in case authentication of first boot image fails. As per LS1046ARM_Reference_Manual, DCFG ScratchRW3 should be written with the CSF header address for alternate boot image. When we test authentication fail for the first image, we get no error in DCFG ScratchRW4. However, the alternate boot image is not executed. Are we missing any additional steps in achieving this?