Flash Firmware with UID

[bsuthar]

Hello Firends,

Two Questions...

1. Firmware Flash with DFU Bootloader succesfully done along with RDP bit. Can we re-flash the fiirmware once RDP L1 is set before through DFU using USB ? my custom board uses STM32F303Rb device.

2. Each STM32 device has UID of 96 bit, Can we use this UID to Club with Firmware so that each firmware image is specifc to that particular Device ? Pls. suggest any Hardware tool / Software tool avilable for same. I found one is segger Flasher secure device, but very expensive.

Regards,

Bsuthar    

[Bubbles]

Hi @bsuthar,

1) It's generally possible to revert RDP back to zero from RDP1, but with a mass erase. Some bootloaders are capable of that, if not, the debug interface can do that. Look at AN2606.

Introduction to system memory boot mode on STM32 MCUs - Application note

2) Doing this will always be expensive. Maybe there's another solution to your problem than linking the UID with binary.

BR,

J

[bsuthar]

Hello Bubbles,

Thank you for your Update.

Does ST has such tools , can be combo of Hardware ( ST-Link )  or Software ( CubeProg ) to achieve same like Segger Tools ? During Conversation with Segger people , We need to buy not only Hardware but Software as well to achieve it ...Leads high investment just to secure firmware on ST MCU Products..

Also , Few ST MCU has Secure Bootloader ( .SFI image ) , not Sure available with our Device ( STM32F303 ) or not ?

[Bubbles]

Hi @bsuthar,

here is the introduction article: Category:Secure manufacturing - stm32mcu

No, STM32F303 is not supported with SFI. The SFI is normally implemented using HSM, which as you said is additional HW and SW investment.

There are probably cheaper solutions than Segger, which are the field leaders for decades. It also depends on scale of the planned manufacturing.

BR,

J