2.1 Immutable ROM Code Bootloader

At the heart of the Secure Boot mode process is the on-chip ROM code, which is read-only and unmodifiable. This “first-stage bootloader” is the first code executed after a reset and contains logic to perform the following:

  • Validate the integrity of the OTP memory content
  • Perform minimal device initialization
  • Enable Secure Boot mode if requested by the Secure Boot Configuration Packet (SBCP)
  • Access keying material provisioned in OTP
  • Enforce security policies stored in the SBCP