4.2 Locking the Secure Boot Mode Configuration

The secure boot configuration packet can be locked to prevent any further configuration.

Use the following command:

sam-ba -p secure --device sam9x70:0:1 -a bootconfig -c writecfg:lockpkt:sbcp-otp
Note: This locking mechanism makes sense for a secure boot configuration packet from the OTP real memory matrix (sbcp-otp parameter). In Emulation mode, simply power off the SAM9X7 Series device to revert it to Standard Boot mode.

This command locks the current secure boot configuration. To discard the current configuration and switch the device back to Standard Boot mode after a reset, use the following command:

sam-ba -p secure --device sam9x70:0:1 -a bootconfig -c writecfg:invalidatecfg:sbcp-emul
Warning: Make sure to lock the Secure Boot Configuration Packet once all provisioning steps are complete, as no further configuration changes are allowed once the SBCP is locked.