17.13.11 Secure Configuration

This register contains the secure configuration setting of the device. It is stored in eFuses memory in Root of Trust module, which is directly driven in this register.

Note:

*_LCK bits in this register refer to the program locks of corresponding eFuses.

Name: SECCFG
Offset: 0x48
Reset: 0x00000000
Property: -

Bit 3130292827262524 
          
Access  
Reset  
Bit 2322212019181716 
        ADD_BOOT_KEY 
Access R 
Reset 0 
Bit 15141312111098 
     BOOT_KEY_LCK[1:0]ROOT_KEY_LCK[1:0] 
Access RRRR 
Reset 0000 
Bit 76543210 
 DEBUG_LCK[1:0]UUID_LCK[1:0]     
Access RRRR 
Reset 0000 

Bit 16 – ADD_BOOT_KEY Additional Boot Key

This bit is the LSB of the Y co-ordinate in the compressed Secure Boot Key.

Bits 11:10 – BOOT_KEY_LCK[1:0] Lock Bits for Secure Boot Key

ValueDescription
11Secure boot key is locked and cannot be programmed
10Secure boot key is locked and cannot be programmed
01Secure boot key is locked and cannot be programmed
00Secure boot key is not locked

Bits 9:8 – ROOT_KEY_LCK[1:0] Lock Bits for Storage Root Key

ValueDescription
11Storage root key is locked and cannot be programmed
10Storage root key is locked and cannot be programmed
01Storage root key is locked and cannot be programmed
00Storage root key is not locked

Bits 7:6 – DEBUG_LCK[1:0] Lock Bits for Debug

ValueDescription
11Debug is locked. Not possible to debug.
10Debug is locked. Not possible to debug.
01Debug is locked. Not possible to debug.
00Debug is not locked.

Bits 5:4 – UUID_LCK[1:0] Programming Lock Bits for Unique ID Fuses

ValueDescription
11Unique ID is locked and cannot be programmed
10Unique ID is locked and cannot be programmed
01Unique ID is locked and cannot be programmed
00Unique ID is not locked