Certificates And Product Series/Device Filtering; Figure 7. Example Of A Forbidden Action; Figure 8. Example Of An Authorized Action - ST STM32H5 Series Getting Started

Example of an authorized action
In this example, the token mask is used to request a debug opening from HDPL3 NS. The permission
accumulation allows this action so it is applied.
In the example described
5.4.4

Certificates and product series/device filtering

It is possible to restrict the use of the certificates to:
• A product series by using the target ID (also named SoC class) when generating the certificate.
– For example, target ID for STM32H573xx is 0x484.
• A specific device by using the SoC ID when generating the certificate.
Target ID and SoC ID are information provided by the discovery service (refer to
AN6008 - Rev 1
Figure 7. Example of a forbidden action
Figure 8, the certificate chain contains a root certificate and a leaf certificate.
Figure 8. Example of an authorized action
STM32H5 debug authentication protocol description
Section 3.1).
AN6008
page 15/25