ST STM32U5 Series User Manual page 7

A detailed programming procedure is provided in the Annex, based on the secure boot code example available in
the STM32Cube firmware package defined in
Certified configuration
After achieving the three secure installation steps, the platform is in its secured configuration, summarized in
Figure 1.
U5 microcontroller series
Reset:
SECBOOTADD0= 0x0C00 X000
BOOT_LOCK=1
WBA5 microcontroller series
Reset:
SECBOOTADD0= 0x0C00 X000
BOOT_LOCK=1
UM3387 - Rev 1
Figure 1.
User flash memory (TZEN=1)
Non- Secure
Secure (optional)
Secure boot firmware
+ immutable root
parameters
(*) (secure boot)
User flash memory (TZEN=1)
Non- Secure
Secure (optional)
Secure boot firmware
+ immutable root
parameters
(*) (secure boot)
Section 3.2.2.
TOE certified configuration
Immutable :
Isolated :
WRP1A_PSTRT
HDP1EN=1
WRP1A_PEND
HDP1_PEND
(*)
Immutable :
Isolated :
WRPA_PSTRT
HDPEN=1
WRPA_PEND
HDP_PEND
(*) X value depends on the WRPA_PSTRT value
UM3387
TOE preparative procedures
Application isolation
SECWN1_PSTRT=0
SECWM1_PEND > WRP1A_PEND
X value depends on WRP1A_PSTRT value
Application isolation
SECWN_PSTRT=0
SECWM_PEND > WRPA_PEND
page 7/22