4.2 Locking the Secure Boot Mode Configuration

The secure boot configuration packet can be locked to prevent any further configuration.

To lock a secure configuration, use the following SAM-BA® command:

sam-ba -p secure --device sam9x60:0:1 -a bootconfig -c writecfg:lockpkt:sbcp-otp

This command locks the current secure boot configuration. To discard the current configuration and switch the device back to Standard Boot mode after a reset, use this SAM-BA command:

sam-ba -p secure --device sam9x60:0:1 -a bootconfig -c writecfg:invalidatecfg:sbcp-otp
Warning: Make sure you lock the Secure Boot Configuration Packet once all provisioning steps are completed, as no further configuration changes are allowed once the SBCP is locked.