STM32H523CCI7 datasheet(24/228 Pages) STMICROELECTRONICS

24 / 228 page

Functional overview

STM32H523xx

24/228

DS14540 Rev 1

When TrustZone is enabled the boot space must be in secure area. SECBOOTADD0[24:0]

option bytes are used to select the boot secure memory address. A unique boot entry option

can be selected by setting the SECBOOT_LOCK option bit.

3.8

Global TrustZone controller (GTZC)

GTZC is used to configure TrustZone and privileged attributes within the full system.

The GTZC includes three different sub-blocks:

•

TZSC: TrustZone security controller

This sub-block defines the secure/privilege state of slave/master peripherals. It also

controls the non-secure area size for the watermark memory peripheral controller

(MPCWM). The TZSC block informs some peripherals (such as RCC or GPIOs) about

the secure status of each securable peripheral, by sharing with RCC and I/O logic.

•

TZIC: TrustZone illegal access controller

This sub-block gathers all security illegal access events in the system and generates a

secure interrupt towards NVIC.

•

MPCBB: MPCBB: block-based memory protection controller

This sub-block controls secure states of all memory blocks (512-byte pages) of the

associated SRAM. This peripheral aims at configuring the internal RAM in a TrustZone

system product having segmented SRAM with programmable-security and privileged

attributes.

The GTZC main features are:

•

Three independent 32-bit AHB interfaces for TZSC, TZIC and MPCBB

•

MPCBB and TZIC accessible only with secure transactions

–

Enable illegal access events that may trigger a secure interrupt

•

Secure and non-secure access supported for privileged/non-privileged part of TZSC

•

Set of registers to define product security settings:

–

Secure/privilege regions for external memories

–

Secure/privilege access mode for securable peripherals

–

Secure/privilege access mode for securable legacy masters

Table 4. STM32H523 boot mode when TrustZone is enabled (TZEN = 0xB4)

PRODUCT_STATE

BOOT0 pin

Boot address option-

byte selection

Boot area

ST programmed

default value

Open

SECBOOTADD[31:8]

Boot address defined by

user option byte

SECBOOTADD[31:8]

Flash: 0x0C00 0000

Bootloader

Provisioning

RSS

Provisioned,

TZ_Closed,

Closed, Locked

SECBOOTADD[31:8]

Boot address defined by

user option byte

SECBOOTADD[31:8]

Flash: 0x0C00 0000

STM32H523CCI7 Datasheet(PDF) 24 Page - STMicroelectronics

STM32H523CCI7 Datasheet(HTML) 24 Page - STMicroelectronics

Html Pages

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 ...More

Datasheet Download

Link URL