Figure 1. Stm32Cubeprogrammer Connection Menu - ST STM32CubeL5 User Manual

Step1: Connection: Menu Target / Connect with Hot plug mode selected
Step2: Option bytes settings: Menu Target / Option bytes
On a virgin chip, the following Option byte values shall be set:
• RDP:0xAA (RDPL0)
• DBANK: 0x1 (Dual bank mode with 64 bits data)
• TZEN: 0x1 (Global TrustZone security enabled)
• SECBOOTADD0: 0x180010 (0x0C000800) (boot entry point address)
• SRAM2-RST: 0 (SRAM2 erased at each reset)
On a chip that has already been used to test a TFM application, the following Option byte values shall be reset
(following below sequence):
• RDP Level 0
• HDP1 (hidden protect area reset)
• WRP1A (Write Protect area reset)
• SECWM1 (Secure flash area reset)
Note: Before performing the device initialization procedure, it is needed first to select User APP menu "TF-M
protection" and then menu "RDP regression" to put the device in a state where it can be re-initialized.
UM2745 - Rev 1
Figure 1. STM32CubeProgrammer connection menu
UM2745
Secure installation
page 8/36