15.2.1 Secure Initial Key Loading
(Ask a Question)Secure Initial Key Loading allows the programming security settings, such as encryption keys, pass keys, and security locks, into a blank device under protection of the unique per-device factory key programmed into every SmartFusion 2, IGLOO 2, PolarFire, and PolarFire SoC device. This is achieved using the Authorization Code Protocol (see Authorization Code Protocol) built into Microchip SmartFusion 2, IGLOO 2, PolarFire, and PolarFire SoC devices. For execution during device programming, the Authorization Code Protocol requires the support of a Hardware Security Module (HSM). See HSM Hardware Modules used by SPPS for more information about HSMs.
Secure Initial Key Loading provides strong cryptographic protection of the user design and
security settings programmed into a blank device. Programming of user defined security
settings disables the factory default key modes, allowing users to access the programmed
device. No one, including the Microchip personnel, can gain access to the device without
the proper security credentials, if the factory test mode is protected by user security
settings.
Note: The user must select
the “Protect factory test mode access using FlashLock/UPK1" or "Permanently protect
factory test mode access" in the Security Policy Manager (SPM).