4.2 Locking the Secure Boot Mode Configuration
The secure boot configuration packet can be locked to prevent any further configuration.
Use the following command:
sam-ba -p secure --device sam9x70:0:1 -a bootconfig -c writecfg:lockpkt:sbcp-otp
Note: This locking mechanism makes sense for a secure boot
configuration packet from the OTP real memory matrix (sbcp-otp parameter). In
Emulation mode, simply power off the SAM9X7 Series device
to revert it to Standard Boot mode.
This command locks the current secure boot configuration. To discard the current configuration and switch the device back to Standard Boot mode after a reset, use the following command:
sam-ba -p secure --device sam9x70:0:1 -a bootconfig -c writecfg:invalidatecfg:sbcp-emul
Warning: Make sure to lock the Secure Boot Configuration
Packet once all provisioning steps are complete, as no further configuration changes are
allowed once the SBCP is locked.
