2.5 Secure Boot ROM and eFuse

The PIC32CX-BZ6 family of devices has ROM memory dedicated for the secure boot firmware for the root of trust. On a Power-on Reset (POR), secure boot firmware authenticates the rest of the program Flash memory. The secure boot code is already programmed in Microchip silicon production on the Masked ROM.

Some of the immutable data that cannot be modified after they are determined and programmed include: secure boot key, SECCFG, UUID and Device ID. Immutable data are stored in non-erasable storage called eFuse memory. For more details, refer to the eFuse memory section in the PIC32CX-BZ6 and PIC32WM-BZ6 Family Data Sheet.