4.2 Locking the Secure Boot Mode Configuration
The secure boot configuration packet can be locked to prevent any further configuration.
To lock a secure configuration, use the following SAM-BA® command:
sam-ba -p secure --device sam9x60:0:1 -a bootconfig -c writecfg:lockpkt:sbcp-otp
This command locks the current secure boot configuration. To discard the current configuration and switch the device back to Standard Boot mode after a reset, use this SAM-BA command:
sam-ba -p secure --device sam9x60:0:1 -a bootconfig -c writecfg:invalidatecfg:sbcp-otp
Warning: Make sure you lock the Secure Boot Configuration
Packet once all provisioning steps are completed, as no further configuration changes
are allowed once the SBCP is locked.
