My H5 DK board is in TZ-CLOSED state (after --sfi-flash), I am unable to put it in "Level 1/2/3 Intrusive Debug" state no matter what combinations of keys and certificates to use (including key_1_root.pem and cert_root.b64). Only Full regression work...

Using MX created an app utilizing Secure Manager 1.2 on STM32H573, after running 'provisioning.py --sfi-gen', the generated sfi image does not include the non-secure app image; after 'provisioning.py --sfi-flash', the product-state is set to TZ-CLOSE...

STM32H573 with Secure Manager provisioned, the non-secure app cannot access the RNG anymore.  Will it be ok to use Secure Manager API psa_generate_random() to replace HAL_RNG_GenerateRandomNumber()? 

H5 has Secure Manager provisioned, and got exception when trying to access UID_BASE to retrieve device ID. #define UID_BASE (0x08FFF800UL) /*!< Unique device ID register base address */