Stm32H5 Series Partial Regression Support; Cli Command For Partial Regression; Debug Reopening Service; Debug Reopening Service Details - ST STM32H5 Series Getting Started

As the WRP protection is defined on a eight Kbytes sector, it is mandatory to match the secure/nonsecure area
limits with the eight Kbytes sector mapping.
In other words, the start and the end of the secure area must match a multiple of four sectors if the WRP is
activated on the secure area. Mixing secure and nonsecure sectors in the WRP zone is not authorized.
If this rule is not applied, an error blocks the partial regression service from running.
3.3.5

STM32H5 series partial regression support

STM32H573xx
STM32H563xx/STM32H562xx
STM32H503xx
3.3.6

CLI command for partial regression

In order to launch a partial regression by using certificate method, use the following command:
.\STM32_Programmer_CLI.exe -c port=SWD speed=fast per=b key=.\key.pem cert=.\certificates_cha
in debugauth=1
3.4

Debug reopening service

3.4.1

Debug reopening service details

The debug reopening service modifies the debug state from the default one (see table below). This is done in a
way to never expose assets to people not allowed to access them.
Debug authentication filters the debug reopening request according to the user credential that comes with it.
Indeed, STM32H5 is in a different debug state according to the current STM32H5 product state.
The table below depicts the STM32H5 default debug state for each product state.
Product state
-
Open
Provisioning
iROT provisioned
TZ-Closed
Closed
Locked
1. STM32H5 secure resources cannot be accessed even if the user establishes a debug connection to STM32H5.
2. The user can only establish a debug connection to STM32H5 when Cortex
debug connection, the user can access every nonsecure resource of the system.
3. The debug authentication service is not available in product state LOCKED.
The debug reopening service can reenable:
• Secure debug connection whereas it is not supported by the STM32H5 product state.
• Nonsecure debug connection whereas it is not supported by the STM32H5 product state.
• Debug connection in an HDP level whereas it is not supported by the STM32H5 product state.
For example, the STM32H5 is in the product state closed.
AN6008 - Rev 1
Table 3. STM32H5 series partial regression support
Part number
Table 4. Debug connection vs product state
Secure
Yes
(1)
No
(1)
No
(1)
No
(1)
No
No (3)
STM32H5 debug authentication services description
Partial regression supported
Yes
Yes
No
Debug connection
Nonsecure
Yes
(2)
Yes
(2)
Yes
(2)
Yes
No
No (3)
‑ M33 is running in nonsecure domain. With a
®
AN6008
Debug open
Yes for HDPL 1, 2, and 3
Yes for HDPL 1
Yes for HDPL 3
Yes for HDPL 3
No
No (3)
page 7/25