Hi,is there a possibility to do the complete chain to product state "closed" by non secure user code ?I have a custom bootloader which usually did a set of the old RDP Level.Now, with a STM32H57 device we have to use the new product state. I'm able t...
To secure my bootloader against erroneous writes from the application I want to enable write protection on it. But since for some things the bootloader needs to modify data inside its partition (security counter update and key invalidation), I can no...
Hi, I wish to know is there any example program for calculating CRC for flash Bank using "HAL_FLASHEx_ComputeCRC() " HAL driver.
# Overview I am looking into secure bootloader options for the STM32U5G9J-DK2 that support application updates. For now, I just wanted to run a demo that showed updating the application over UART.Initially I thought to start with SBSFU since that is ...
Hello,I’m working with the STM32H735, and I need to enter bootloader mode to program the microcontroller. I modify the SYSCFG->UR2 register to set the address to 0x1FF00000, then perform a software reset. I use this method because I have no control o...
Hello, Actually am using STM32H5 board am able to load the secure manager using ST-Link Debugger but i would like to load the secure manager using usb dfu mode, is there any possiblity to load it.
I tried to provision Secure Manager 1.2 to my DK board, and got the following error messages in the provisioning.log:2024-11-10 15:49:30,796 - root - DEBUG - Error: SFI command is not supported for the current device configuration using STLINK interf...
Hi,I am working on regression from RDP1 to RDP0 with OEM1KEY but made from inside and not by external debugger.I want device to be able to make self unlocking.As I read in documentation RM0456, OEM1KEY unlock sequence requires:Shift OEM1KEY[31:0] th...
Hi everybody,I am using a platform that is based on STM32. The developers of this platform have provided to me the firmware image as an encrypted .bin file. When I flash it via USB everything is fine.Then I change their code and recompile everything ...
The OEMiRoT project uses ExitSecureMemory V1.1 to enable 1 MPU region and start the application. This automatically enables the configured HDP region, so application cannot access the bootloader. The default OEMiRoT project allows for 2 tiny 64kB app...