2.1 Immutable ROM Code Bootloader
At the heart of the Secure Boot mode process is the on-chip ROM code, which is read-only and unmodifiable. This “first-stage bootloader” is the first code executed after a reset and contains logic to perform the following:
- Validate the integrity of the OTP memory content
- Perform minimal device initialization
- Enable Secure Boot mode if requested by the Secure Boot Configuration Packet (SBCP)
- Access keying material provisioned in OTP
- Enforce security policies stored in the SBCP
