How to map HDPL levels to ST boot/ User Boot / User secure app/ user unsecure app?

[Vishal58]

How can we map HDPL levels to ST boot/ User Boot / User secure app/ user unsecure app in STM32H573 controller ?

In user flash if I want to place my OEM ROT , OEM uROT, Secure App and Unsecure App, How do I map each HDPL level to corresponding boot or user application ?

[ELABI.1]

Hi @Vishal58,

Please refer to this knowledge base  and this Wiki which can help with your questions.

Thank you.

ELABI.1

[Vishal58]

Hi ELABI.1,

I have gone through the links referred by you but could not find the answer for my question.

My use case is to use one boot(single stage user defined) and 2 applications(secure and unsecure) in user flash area.

Say I have allocated Bank 1 HDPL user flash area for my boot and another Bank HDPL user flash area for my secure and unsecure applications.

Now How do I specify that boot is at HDPL level 1 and Secure Application is at level 3S and Unsecure application is at HDPL Level 3NS ?

Thanks & Regards,

Vishal K

[ELABI.1]

The definition of HDPL areas is done throw Trusted package creator tool which is part of cube programmer and the image generation process will depend on the mapping  in of root project which will be used to configure hide protection levels and debuggability in flash_layout.h after compiling the project the Trusted package creator image generation tool will let you define code size areas for both secure and non-secure applications see this wiki which give more details about the usage of the images templates and scripts without the need to manually set HDLP areas How to start with OEMiRoT on STM32H573 and 563–Arm® TrustZone® enabled - stm32mcu and also this Application note AN6007 can help you.

Thank you.

ELABI.1