2024-12-12 02:54 AM
In the case of a root of trust with two boot stages (STiRoT + OEMuRoT), I'm looking to update the OEMuRoT or the firmware. From STM32CubeProgrammer I can do this via the bootloader. However, when I use the ST-LINK probe and try to program the new firmware (the encrypted and signed hex that worked in the case of the bootloader) I get the following error: ‘failed to download firmware’.
I am in PRODUCT_STATE = OPEN
the logs indicate that the flash cannot be programmed
Is it possible to update encrypted and signed firmware using the ST-LINK probe?
2024-12-12 03:36 AM
Hello @axel_lagrange ,
I assume that you have Trustzone enabled.
just to make it clear, what you are trying to do is not the described path for OEMuROT solution. I recommend that you check the dedicated wiki article:
How to start with STiRoT_OEMuRoT on STM32H573 - stm32mcu
in the meanwhile, if your use case is not as the intended Wiki description let me know.
Regards
2024-12-12 05:05 AM
Yes TrustZone is enabled
Regardless of the boot stage chosen, my question is why can't I download code in the download area with the ST-LINK probe?
If you look at the logs (st-link.txt) with the ST-LINK probe, you can see that you can't even delete the Flash sectors in the download area.
Is it possible to make the download area sectors accessible to the ST-LINK probe?
Regards