2025-07-13 8:19 PM
Hello,
I have an existing project and I'm attempting to retrofit it with TrustZone, starting with a new IOC file that will be the basis of the project which I will then retrofit my code into. I'm starting with a clean slate ioc file for the STM32U545CET6 from CubeMX.
Is there a way to enable TrustZone with all memory 'whitelisted' such that all accesses are allowed? If so, please provide details such that the firmware will operate (initially) as if TrustZone were not there. I either want to:
1. Make everything in the processor secured (such that I have zero access errors) and get my firmware running. Selectively mark certain parts of my application unsecured one-by-one to ensure I don't break anything too badly.
2. Make everything in the processor unsecured (such that I have zero access or TZ errors) and get my firmware running. Selectively mark certain parts of my application secure one-by-one to ensure I don't break anything too badly.
How do people normally do this? I just want to ensure the IOC and initial code-generation is correct so that I can get the firmware running, and I can later partition secure/nonsecure sections with small iterations.
Thanks,
Justin