60.6.3.4.5 Software Restrictions for JTAG Debug Mode
Setting SECUMOD_JTAGCR.PROC_DEBUG_MODE sets the processor inputs DBGEN, SPIDEN, NIDEN and SPNIDEN to the appropriate level in order to allow different debug permission levels. See SECUMOD_JTAGCR for more information.
The reset value of SECUMOD_JTAGCR can be chosen as ‘full debug’ or ‘no debug’, depending on the programming of the SECDBG field in the customer OTP area.
Programming this field sets the default debug level after reset irreversibly.
Note that the OTP settings described above have priority over software settings, so SECUMOD_JTAGCR is not able to restore modes which are disabled through OTP. As an example, if the SECDBG field is programmed, allowing secure debug in SECUMOD_JTAGCR has no effect.