Stm32H5 Series Full Regression Support; Cli Commands For Full Regression; Partial Regression Service; Partial Regression Service Details - ST STM32H5 Series Getting Started

The full regression service is not available in the product state open or locked.
3.2.2

STM32H5 series full regression support

STM32H573xx
STM32H563xx/STM32H562xx
STM32H503xx
3.2.3

CLI commands for full regression

In order to launch a full regression by using certificate method, use the following command:
.\STM32_Programmer_CLI.exe -c port=SWD speed=fast per=a key=.\key.pem cert=.\certificates_cha
in debugauth=1
with
• key.pem = .pem file containing the user private key
• certificates_chain = .b64 file containing the chain of certificates
In order to launch a full regression by using password method, use the following command:
.\STM32_Programmer_CLI.exe -c port=SWD per=a pwd=.\password.bin debugauth=1
with
password.bin = binary file containing the password
3.3

Partial regression service

3.3.1

Partial regression service details

The partial regression service changes the product state to TZ-closed.
When launching the partial regression service, the following actions are performed:
• Erase the STM32H5 nonsecure memories:
– Nonsecure user flash memory. User flash sectors are not covered by flash secure watermark
registers.
– HDPL3 nonsecure OBK
– Back up RAM
• Increments the nonsecure EPOCH
• Change the product state to TZ-closed
The partial regression service is only available in the product state closed.
3.3.2

Partial regression service and EEPROM emulation

If EEPROM emulation is activated, the partial regression deactivates it before performing the erasure, and
reactivates it at the end of the process. Hence, the data in the EEPROM zone is fully erased after a partial
regression.
3.3.3

Partial regression service and HDP areas

If an HDP area is defined and covers secure and nonsecure sectors, the partial regression service erases the
nonsecure sectors and resizes the HDP area to cover only the secure sectors after the partial regression
processing.
3.3.4

Partial regression service and WRP

When launching the partial regression service, the WRP protection is removed on nonsecure sectors.
AN6008 - Rev 1
Table 2. STM32H5 series full regression support
Part number
STM32H5 debug authentication services description
Full regression supported
Yes
Yes
Yes
AN6008
page 6/25