OEMiROT for STM32H573

[saifmm]

Hello,

I am working with an STM32H573 and I would like to implement OEMiROT.
Is it possible to use OEMiROT without activating TrustZone on this device?

If it is possible, is there an official or recommended ST method?

Any clarification or pointers to documentation or real-world implementations would be appreciated.

Thank you.

[Bubbles]

Hi @saifmm,

this is a tricky question. The STM32H573 OEMiRoT project provided in the Cube package is intended to execute with TrustZone enabled. We are very clear about it. Trying to convert it to non-TZ would be inefficient effort.

There's however an alternative OEMiRoT intended for the smaller STM32H503, which is limited in scope, but targeting non-isolation environment.

So if you want the memory size of H573 and don't need the TZ isolation, I suggest to look at the H503 code examples. Just beware that the DA authentication is realized in different way in H503 and H573, so the provisioning scripts from H503 won't work on your device. You'll need to improvise a little here.

BR,

J