Hi,
TI states that secure part is needed to use ARM TrustZone.
http://e2e.ti.com/support/dsp/c6000_multi-core_dsps/f/639/t/325088.aspx
But I suspect that we can use limited TrustZone features with non-secure part. I'd like to make sure it. The reason is the fact that the boot monitor software in MCSDK, is dealing with the switching between the secure world and the non-secure world.
http://processors.wiki.ti.com/index.php/MCSDK_UG_Chapter_Exploring#Boot_Monitor_2
This means that KeyStone II non-secure devices on the EVMs have TrustZone implementations on some level. If the memory space separation feature of TrustZone (dedicated MMU for each world) is available for non-secure device, it will be great usefull for many users. I know that non-secure part doesn't support the secure boot.
Best regards,
Tsutomu Furuse