...
- Closely following e2studio/FSP
- Project/make files
- S project
- src
- include
- test
- NS project
- src
- include
- test
- Scripts
- Tools
- Docs
3.4
...
Privilege states
One SDK supports booting for MCU with Trust Zone support or without. In bootingFor MCU with TZ, three roles can be privilege states are supported: Factory (Renesas), Unsealed (OEM/ODM (unsealed), end user Sealed (sealedUser). For MCU with without TZ support, the booting processing supports all three roles, each represented by a stateonly Unsealed and Sealed states are supported. The meaning of each is defined below:
- Factory (STATE_FACTORY) – Factory modestate is intended to be accessible only by Renesas. In this state, MCU runs the factory bootloader in secure (S) mode. Both secure and non-secure code/data can be read and written. Factory mode can only be entered from unsealed state with factory command and factory password known only to Renesas. Factory state is always exits to seal state with a self-reset.
- Sealed (STATE_SEALED) – Sealed state is where application runs. After reset, factory bootloader quickly check if it should enter the factory state; if not it will immediately transition to sealed state and jumps to the application.
- Unsealed (STATE_UNSEALED) – Unsealed state is only entered from the sealed state with unsealed command and customer password. Unsealed state runs in NS mode and supports additional commands.
...
3.4.2 Updating firmware
Firmware update involves a host writing new code and /data to into secure and non-secure flash memories using the host CMD_FLASH_WR command . The host PC shall parse an by parsing the Intel HEX file into series of commands each follow by the checksum. The generated from the firmware build process. Then the host can setup the Trust Zone memory boundaries are then configured by writing to the the IDAU registers.
...