ST STM32CubeU5 TFM Manuals

Manuals and User Guides for ST STM32CubeU5 TFM. We have 1 ST STM32CubeU5 TFM manual available for free PDF download: User Manual

ST STM32CubeU5 TFM User Manual (117 pages)

Brand: ST | Category: Motherboard | Size: 8 MB

General Information
2
Applicable Products and Default Examples
2
Acronyms
2
Table 1. List of Acronyms
2
Documents and Open-Source Software Resources
4
Table 2. Document References
4
Table 3. Open-Source Software Resources
4
Stm32Cube Overview
5
Arm® Trusted Firmware-M (TF-M) Introduction
6
Figure 1. TF-M Overview
6
Secure Boot and Secure Firmware Update Services (PSA Immutable Rot)
7
Product Security Introduction
7
Secure Boot
7
Figure 2. Secure Boot Root of Trust
7
Secure Firmware Update
8
Figure 3. Typical In-Field Device Update Scenario
8
Cryptography Operations
9
Secure Services at Runtime
10
Protected Storage Service (PS)
10
Internal Trusted Storage Service (ITS)
10
Secure Cryptographic Service
11
Initial Attestation Service
11
Firmware Update Service
11
Protection Measures and Security Strategy
12
Figure 4. TFM Application Using STM32U5 Security Peripherals
12
Protections against Outer Attacks
13
Protections against Inner Attacks
13
Figure 5. System Protection Overview
15
Package Description
16
TFM Application Description
16
Table 4. Features Configurability in TF-M-Based Examples in the Stm32Cubeu5 MCU Package
17
TFM Application Architecture Description
18
Board Support Package (BSP)
18
Figure 6. TFM Application Architecture
18
Hardware Abstraction Layer (HAL) and Low-Layer (LL)
19
Mbed-Crypto Library
19
Mcuboot Middleware
19
Trusted Firmware-M Middleware (TF-M)
19
Stsafe
20
Tfm_Sbsfu_Boot Application
20
Tfm_Appli Secure Application
20
Tfm_Appli Nonsecure Application
20
Tfm_Loader Nonsecure Application
20
Tfm_Loader Secure Application
20
Memory Layout
20
Flash Memory Layout
20
Figure 7. STM32U5 TFM Flash Memory Layout (Default Configuration)
22
Figure 8. STM32U5 TFM Flash Memory Layout (Primary Only Slot)
23
Figure 9. STM32U5 TFM Flash Memory Layout (One Image)
24
Figure 10. STM32U5 TFM Flash Memory Layout (Swap Mode)
25
Figure 11. New Firmware Download and Install Procedure for Overwrite Mode, Two Firmware Images Configuration, and for
26
Primary and Secondary Slot Configuration
26
Figure 12. New Firmware Download and Install Procedure for Overwrite Mode, Two Firmware Images Configuration and for
26
Primary Only Slot Configuration
26
Figure 13. New Firmware Download and Install Procedure for Overwrite Mode, One Firmware Image Configuration and for
27
Primary and Secondary Slot Configuration
27
Figure 14. New Firmware Download and Install Procedure for Overwrite Mode, One Firmware Image Configuration and for
27
Primary Only Slot Configuration
27
Figure 15. New Firmware Download and Install Procedure for Swap Mode, with Images Confirmation
28
Figure 16. New Firmware Download and Install Procedure for Swap Mode, with Images Not Confirmed
28
Figure 17. Firmware Image and Slot Area
29
SRAM Layout
30
Folder Structure
31
Figure 20. Projects File Structure (1 of 3)
31
Figure 21. Projects File Structure (2 of 3)
32
Apis
33
Figure 22. Projects File Structure (3 of 3)
33
Hardware and Software Environment Setup
34
Hardware Setup
34
Software Setup
35
Stm32Cubeu5 MCU Package
35
Development Toolchains and Compilers
35
Software Tools for Programming STM32 Microcontrollers
35
Terminal Emulator
35
Python
35
Installation Procedure
36
Application Compilation Process
36
Application Compilation Overview
37
Figure 23. Compilation Process Overview
37
Application Compilation Steps
38
Table 5. Development Versus Production Mode
38
STM32U5 Device Initialization
41
Figure 24. Stm32Cubeprogrammer Connection Menu
42
Figure 25. Stm32Cubeprogrammer Option Bytes Screen (Read out Protection)
43
Figure 26. Stm32Cubeprogrammer Option Bytes Screen (User Configuration - Part 1)
44
Figure 27. Stm32Cubeprogrammer Option Bytes Screen (User Configuration - Part 2)
44
Figure 28. Stm32Cubeprogrammer Option Bytes Screen (Boot Configuration)
44
Figure 29. Stm32Cubeprogrammer Option Bytes Screen (Secure Area 1)
45
Figure 30. Stm32Cubeprogrammer Option Bytes Screen (Write Protection 1)
45
Figure 31. Stm32Cubeprogrammer Option Bytes Screen (Secure Area 2)
46
Figure 32. Stm32Cubeprogrammer Option Bytes Screen (Write Protection 2)
46
Software Programming into STM32U5 Internal Flash Memory
47
Figure 33. Stm32Cubeprogrammer Flash Memory Nonsecure Status Register Screen (OEM2LOCK)
47
Figure 34. Stm32Cubeprogrammer Disconnect
47
Configuring STM32U5 Static Security Protections
48
Figure 35. Stm32Cubeprogrammer Connection Menu
48
Figure 36. Stm32Cubeprogrammer Option Bytes Screen (Boot Configuration)
49
Figure 37. Stm32Cubeprogrammer Option Bytes Screen (Secure Area 1)
49
Figure 38. Stm32Cubeprogrammer Option Bytes Screen (Write Protection 1)
50
Figure 39. Stm32Cubeprogrammer Option Bytes Screen (Secure Area 2)
50
Figure 40. Stm32Cubeprogrammer Option Bytes Screen (Write Protection 2)
51
Figure 41. Stm32Cubeprogrammer Option Bytes Screen (WRP1A Lock)
51
Figure 42. Stm32Cubeprogrammer Option Bytes Screen (WRP2A Lock)
52
Figure 43. Stm32Cubeprogrammer Option Bytes Screen (RDP)
52
Figure 44. Stm32Cubeprogrammer Option Bytes Screen (RDP Confirmation)
53
Figure 45. Stm32Cubeprogrammer Disconnect
53
Tera Term Connection Preparation Procedure
54
Tera Term Launch
54
Tera Term Configuration
54
Figure 46. Tera Term Connection Screen
54
Figure 47. Tera Term Setup Screens
54
ST-LINK Disable
55
Figure 48. Information Example Displayed on Tera Term in Development Mode
55
Figure 49. Information Example Displayed on Tera Term in Development Mode
56
STM32U5 Device Reinitialization
57
Figure 50. Display on Tera Term in Production Mode
57
Step-By-Step Execution
58
Welcome Screen Display
58
Test Protections
58
Figure 51. TFM Nonsecure Application Welcome Screen
58
Figure 52. Test Protection Menu
58
Figure 53. Test Protection Results
59
Test TFM
60
Figure 54. TFM Test Menu
60
Figure 55. TFM Test Results
61
New Firmware Image
64
New Firmware Image in Overwrite Mode Configuration (Default Configuration)
64
Figure 56. New Firmware Image Menu
64
Figure 57. Firmware Image Transfer Start
65
Figure 58. Firmware Image Transfer in Progress
65
Figure 59. Reset to Trigger Installation
66
Figure 60. Image Installation (in Overwrite Mode)
67
New Firmware Image in Swap Mode Configuration
68
Figure 61. Image Installation (in Swap Mode)
68
Figure 62. New Firmware Image Menu (Swap Mode)
69
Figure 63. Validate Secure or Nonsecure Image
69
Figure 64. Image Reverted if Not Validated
70
Nonsecure Data
71
Local Loader
71
Figure 65. Nonsecure Data Menu
71
Figure 66. TFM Local Loader Application Welcome Screen
71
Integrator Role Description
72
Configuration
72
Figure 67. Integrator Minimal Customizations
76
Table 6. Integrator Personalized Data in Source Code
77
Figure 68. Integrator Personalized Data in Tfm_Sbsfu_Boot Binary (Initial_Attestation_Priv_Key Example)
78
Figure 69. B-U585I-IOT02A Board Setup
80
Figure 70. B-U585I-IOT02A Board Setup (Detail)
80
Figure 71. Reset Button on the B-U585I-IOT02A
81
Figure 72. Jumper JP3 (IDD) on the B-U585I-IOT02A Board
81
Figure 73. STM32U5A9J-DK Board Setup
82
Figure 74. STM32U5A9J-DK Board Setup (Detail)
82
Figure 75. Reset Button on the STM32U5A9J-DK
83
Figure 76. STM32U5G9J-DK2 Board Setup
84
Figure 77. Reset Button and JP4 Jumper (IDD) on the NUCLEO-U545RE-Q
85
Figure 78. Flash Memory Protection Overview During Tfm_Sbsfu_Boot Application Execution
86
Figure 79. Flash Memory Protection Overview When Leaving Tfm_Sbsfu_Boot Application to TFM Application
87
Figure 80. Flash Memory Protection Overview During Application Execution
88
Figure 81. Flash Memory Protection Overview When Leaving Tfm_Sbsfu_Boot Application to Nonsecure Local Loader
89
Application
89
Figure 82. Flash Memory Protection Overview When Leaving Tfm_Sbsfu_Boot Application to Secure and Nonsecure Local
90
Loader Application
90
Table 7. SBSFU Configuration Option
93
Table 8. SBSFU Footprint Examples
95
Table 9. Secure Application Configuration Options
96
Table 10. Secure Application Footprint Example
98
Table 11. Firmware Loader Application Configuration Options
98
Table 12. Firmware Loader Application Footprint Example
99
Table 13. Nonsecure Application Configuration Options
99
Table 14. Nonsecure Application Footprint Example
100
Table 15. Tfm_Sbsfu_Boot Cryptographic Algorithms
101
Figure 84. Secure Boot Execution Timing
102
Table 16. "Secure Boot" Operations Timing Indications
103
Table 17. "Secure Boot" Execution Timing Value Indications
104
Table 18. TFM Runtime Cryptographic Algorithms Activated by Default
104
Table 19. Cryptographic Algorithms Present but Not Activated
105
Table 20. Performance for Cryptographic TFM Runtime Services
107
Table 21. Troubleshooting
108
Table 22. Document Revision History
109

ST Categories

Motherboard Computer Hardware Microcontrollers Control Unit Controller

More ST Manuals

ST STM32CubeU5 TFM Manuals

ST STM32CubeU5 TFM User Manual (117 pages)

Table of Contents

Related Products

ST Categories