JTAG/SPI Slave Commands Locks

The JTAG/SPI slave command locks include the following:

Table 1. Locks to Disable JTAG/SPI Slave Commands
Lock Function when active Description
Disable external access to PUF emulation External access to PUF emulation through JTAG and SPI Slave interfaces are disabled.
Disable external fabric/sNVM/eNVM (for PolarFire SoC FPGA only) digest requests External Fabric/sNVM/eNVM (for PolarFire SoC FPGA only) digest check requests through JTAG and SPI Slave interfaces are disabled. Export of stored digests is not affected.
Disable external zeroization requests External zeroization requests through JTAG/SPI Slave interfaces are disabled.

These locks can be temporarily overridden in the event of a FlashLock (UPK1) passcode match. Use the Configure Security Wizard and select the JTAG/SPI Slave commands policy page to apply the JTAG/SPI slave command policy lock bits, as shown in the following figure. These locks only apply when bitstreams are being loaded through the JTAG or SPI slave interfaces, and they do not apply to IAP functions.

Figure 1. JTAG/SPI Slave Commands Policy Page