STM32H573xx: update with ST-JLINK

[axel_lagrange]

In the case of a root of trust with two boot stages (STiRoT + OEMuRoT), I'm looking to update the OEMuRoT or the firmware. From STM32CubeProgrammer I can do this via the bootloader. However, when I use the ST-LINK probe and try to program the new firmware (the encrypted and signed hex that worked in the case of the bootloader) I get the following error: ‘failed to download firmware’.

I am in PRODUCT_STATE = OPEN

 the logs indicate that the flash cannot be programmed

Is it possible to update encrypted and signed firmware using the ST-LINK probe?

[STea]

Hello @axel_lagrange ,

I assume that you have Trustzone enabled.

just to make it clear, what you are trying to do is not the described path for OEMuROT solution. I recommend that you check the dedicated wiki article:

How to start with STiRoT_OEMuRoT on STM32H573 - stm32mcu 
in the meanwhile, if your use case is not as the intended Wiki description let me know.

Regards

[axel_lagrange]

Yes TrustZone is enabled

Regardless of the boot stage chosen, my question is why can't I download code in the download area with the ST-LINK probe? 

If you look at the logs (st-link.txt) with the ST-LINK probe, you can see that you can't even delete the Flash sectors in the download area.

Is it possible to make the download area sectors accessible to the ST-LINK probe?

Regards

[STea]

Hello @axel_lagrange ,

Can you share the log of bootloader operation which was done successfully as the address you are using is not the default address of flash when TZ enabled. See Table 24 of R0481:

Could you specify the version of CubeProgrammer you are using as well.

Regards