Skip to main content
Explorer
September 30, 2026
Solved

OB key Provisioning

  • September 30, 2026
  • 1 reply
  • 31 views

I am using the STM32H5F5 and plan to implement the Secure Manager. I would appreciate clarification on the following questions:

  1. Can the user application key be provisioned to the OBKey area during Secure Manager installation?

  2. After the Secure Manager is installed, can the user application write a key to the OBKey area?

  3. How can an application—secure or non-secure—read a provisioned OBKey?

Best answer by Chloe Meunier

Hello,

 

Concerning Secure Manager for H5 you have a large panel of wiki articles available here:
https://wiki.st.com/stm32mcu/wiki/Category:How_to_start_with_Secure_Manager_on_STM32H5

 

To briefly answer your questions:

1-  Yes during the provisioning/installation flow OBKs are provisioned.
You can see an example of provisioning in this wiki article : https://wiki.st.com/stm32mcu/wiki/Security:How_to_start_with_Secure_Manager_default_configuration_on_STM32H5
2-  After the Secure Manager is installed, product is in TZ-Closed with secure resources protected.
3- Secure application can use OBKs

 

BR

Chloé

1 reply

Chloe Meunier
Chloe MeunierBest answer
ST Employee
October 1, 2026

Hello,

 

Concerning Secure Manager for H5 you have a large panel of wiki articles available here:
https://wiki.st.com/stm32mcu/wiki/Category:How_to_start_with_Secure_Manager_on_STM32H5

 

To briefly answer your questions:

1-  Yes during the provisioning/installation flow OBKs are provisioned.
You can see an example of provisioning in this wiki article : https://wiki.st.com/stm32mcu/wiki/Security:How_to_start_with_Secure_Manager_default_configuration_on_STM32H5
2-  After the Secure Manager is installed, product is in TZ-Closed with secure resources protected.
3- Secure application can use OBKs

 

BR

Chloé