Texas Instruments AM263P Series User Manual page 4

Evaluation Module Overview
1.3.1 HSEC 180-pin Control Card Docking Station
The TMDSHSECDOCK 180-pin docking station
docking station is a baseboard that enables rapid prototyping. There is a power switch on the docking station
that determines whether power to the control card is supplied by the 5 V connector or USB connector.
The docking station power switch must to be toggled to the EXT-ON side to meet the power
requirements of the AM263Px Control Card. EXT-ON indicates that the power is being sourced from
the Barrell connector of the Control Card Dock. The mini-USB (USB-ON) connector does not meet the
power requirements of the AM263Px Control Card.
The AM263Px Control Card has a power mux (TPS2121RUXT) that supplies power from the type-C connection
as long as the voltage supplied by the type-C connection is equal to or greater than the voltage supplied by the
HSEC docking station. Therefore, if both a type-C connection is present and the control card is connected to a
powered HSEC docking station, then the power mux routes the type-C supplied voltage to VMAIN of the control
card. If there is no type-C connection and voltage is being supplied through the HSEC docking station, then the
power mux routes that voltage to VMAIN of the control card.
For more information on the docking station, refer to the
1.3.2 Security
The AM263Px Control Card features a High Security, Field Securable (HS-FS) device. An HS-FS device has
the ability to use a one time programming to convert the device from HS-FS to High Security, Security Enforced
(HS-SE).
The AM263Px device leaves the TI factory in an HS-FS state where customer keys are not programmed and has
the following attributes:
• Does not enforce the secure boot process
• M4 JTAG port is closed
• R5 JTAG port is open
• Security Subsystem firewalls are closed
• SoC Firewalls are open
• ROM Boot expects a TI signed binary (encryption is optional)
• TIFS-MCU binary is signed by the TI private key
The One Time Programmable (OTP) keyrwriter converts the secure device from HS-FS to HS-SE. The OTP
keywriter programs customer keys into the device eFuses to enforce secure boot and establish a root of trust.
The secure boot requires an image to be encrypted, which is optional, and signed using customer keys, which is
verified by the SoC. A secure device in the HS-SE state has the following attributes:
• M4, R5 JTAG ports are both closed
• Security subsystems and SoC firewalls are both closed
• TIFS-MCU and SBL need to be signed with active customer key
4 AM263Px Control Card Evaluation Module
is available for purchase through Texas Instruments. The
Note
Informational
Copyright © 2023 Texas Instruments Incorporated
Guide.
SPRUJ86 – OCTOBER 2023
Submit Document Feedback
www.ti.com