STM32N6 OEMuROT Without Download Slot

[JDave.4]

Hello,

I would like to add Secure Boot + SFU functionality to my TouchGFX app with STM32N6. Since it is a graphics app, i don’t want to partition the external flash memory as installation and download slots as shown in the ST wiki for OEMuROT. 

https://wiki.st.com/stm32mcu/wiki/Security:OEMuRoT_for_STM32N6

 

To use external memory for apps and assests efficiently; below architecture is more suitable for me. Which changes are needed in the ST example ROT projects? With this, is it possible to debug the app code?

 

                 Normal boot
                      │
                     ▼
BootROM → Secure FSBL → verify App + Assets → HMI

 

           Firmware update
                      │
                     ▼
             USB / CAN
                      │
           signed package
                      │
                     ▼
                Secure FSBL
                      │
     signature + version check
                      │
                 program NOR
                      │
                  verify
                      │
                  reboot