...
3.4 Factory Bootloader
One SDK bootloader booting flow supports three privilege states:
- Factory (STATE_FACTORY) – Factory mode. MCU runs factory bootloader in S mode. Both secure and non-secure code/data can be read and written. Factory mode can only be entered from unsealed state with factory command and factory password known only to Renesas. Factory state is always exits to seal state with a self-reset.
- Unsealed (STATE_UNSEALED) – Unsealed state is only entered from the sealed state with unsealed command and customer password. Unsealed state runs in NS mode and supports additional commands
- Sealed (STATE_SEALED) – Sealed state is where application runs. After reset, factory bootloader quickly check if it should enter the factory state; if not it will immediately transition to sealed state and jumps to the application.
3.4.1 Top-level pseudo code
...