STM32 MCUs Security

Resolved! [SOLVED] STM32U5 TFM example (B-U585I-IOT02A) memory mapped PSRAM not accessible

We managed to successfully run TFM_SBSFU example for the IOT02A board. We are using latest STM32Cube_FW_U5_V1.2.0.The problem is that we do not have access to PSRAM from NonSecure application when in memory mapped mode.We implemented PSRAM init by im...

Hi, is there a full reference document for the prepareimage (Win exe or Python) tool, which is used in the SBSFU package? I see some examples but I'd like to be able to look up detailed information on the various parameters.

I do have the document UM2262 which describes the SBSFU expansion package, but it only gives a fairly brief explanation of the prepareimage tool.

Resolved! Firmware authenticity verification with ECDSA

Hello,I am using the X-CUBE-SBSFU package with the KMS to perform firmware update on my ST MCU.To verify the authenticity of the firmware I use ECDSA. However, I don't understand why I only need to provide a private key but not the public key. If I u...

Continuous reset loop with SBSFU on STM32L4R9. Reset always happens right at the moment the secure engine is called.

When the Secure Engine Call (inside SE_Init() function) is called in this line:e_ret_status = (*SE_CallGatePtr)(SE_INIT_ID, peSE_Status, primask_bit, uSystemCoreClock);(which is between a SE_EnterSecureMode and SE_ExitSecureMode). The MCU resets at t...

NUCLEO-H745ZI-Q SBSFU adaptation cannot boot CM4 image.

Hello, I am trying to adapt the H753xx SBSFU implementation to the H745xx dual core board.I have so far configured a second slot by creating a second MPU region of 1KB to protect the header of the second slot, as well as changing the security checks ...

Resolved! Reverting Option Byte Configuration after TF-M Testing in STM32U585

Hi ChannelI have tested the TF-M Package Released by ST, on the STM32U585 and its working fine. Now i want to revert back my STM32U585 (B-U585I-IOT02A Kit) as for the testing of TF-M SBSFU there is some configuration of option bytes as given in UM285...

Add a binary header and a sbsfu segment to an elf file

I have a problem with merge SBSFU .elf file and application .elf.I prepared:SBSFU.elf - addresses in linker script: 0x08000000 - 0x08020000application.elf - 0x08020400 - 0x081FFFFFheader.bin - size: 1024BSo I suppose, that like in SBSFU example heade...

Resolved! How to integrate SBSFU in STM32U585 series

Hello support team,Have a Nice day.I am working on STM32U585ZIT6 Controller and investigating SBSFU for firmware upgrading.I list our specifications for a custom bootloader below.Enable TrustZoneEnable Dual bankRun time firmware write in the second b...

How to validate an image with security features enabled?

Hi all,In our project we have enabled the ENABLE_IMAGE_STATE_HANDLING flag and download an image via YMODEM transfer to our NUCLEO-L476RG. However, when we try to validate the image by calling SE_APP_ValidateFw(), our STM reboots and does a rollback....

wireless stack did not start and stop in SBSFU

Hi,I am replacing Standalone Loader(Ymodem serial) and porting BLE_OTA in SBSFU as mention in AN5056 section 8.4 How to replace the standalone loader with a BLE OTA loader i am successfully ported and run BLE OTA but as wireless stack not started it ...