This thread has been locked.

If you have a related question, please click the "Ask a related question" button in the top right corner. The newly created question will be automatically linked to this question.

TMS320F28375S: Programming a password into the F2837xS

Part Number: TMS320F28375S

All:

Two points from the referenced e2e post - can someone confirm that this is also the case with the F2837xS?

1) DSP Unlocking

To lock the device, you can use DSP2833x_CSMPasswords.asm to program your passwords and secure your device.  The passwords are linked to a section which is mapped to the appropriate memory addresses by the linker command file.  In order to unlock your device, see Figure 12.  You need to read 0x33FFF8-0x33FFFF.  After performing these dummy reads, you need to write the correct passwords to 0x0AE0 - 0x0AE7.  If the passwords match, the device will unlock.

2) Secured DSP Debugging

You cannot debug secure memory.  You cannot connect CCS through JTAG to the device while it running from secure memory.  The text that you posted means that code running from secure memory can read write and execute to secure memory.  However, you cannot access the code via JTAG.  you cannot read or write from unsecure memory including a JTAG connection.

If you connect via the JTAG emulator to the device and reset the device and it boots to secure Flash, then the emulator will get disconnected.  Wait in Reset, allows you to connect to the device before it jumps to your secure application.  You can do some debugging this way.  You cannot debug secure memory while your device is secure.  This would defeat the purpose of securing your device.

  • Hi Todd,

    1) DSP Unlocking

    To lock the device, you can use DSP2833x_CSMPasswords.asm to program your passwords and secure your device.  The passwords are linked to a section which is mapped to the appropriate memory addresses by the linker command file.  In order to unlock your device, see Figure 12.  You need to read 0x33FFF8-0x33FFFF.  After performing these dummy reads, you need to write the correct passwords to 0x0AE0 - 0x0AE7.  If the passwords match, the device will unlock.

    Along with password, you also need to program the GRABSECT and GRABRAM locations to secure the required flash sectors and LSxRAM. Unlike earlier C2000 device where programming password secure all the flash sectors and secure RAMs, on this device user can choose which flash sectors and secure RAM block he/she wants to secure (allocated to Z1 or Z2 if using dual zone or just allocate to Z1 is using just one zone) by programing appropriate fields in GRABSECT and GRABRAM OTP locations.

    2) Secured DSP Debugging

    You cannot debug secure memory.  You cannot connect CCS through JTAG to the device while it running from secure memory.  The text that you posted means that code running from secure memory can read write and execute to secure memory.  However, you cannot access the code via JTAG.  you cannot read or write from unsecure memory including a JTAG connection.

    If you connect via the JTAG emulator to the device and reset the device and it boots to secure Flash, then the emulator will get disconnected.  Wait in Reset, allows you to connect to the device before it jumps to your secure application.  You can do some debugging this way.  You cannot debug secure memory while your device is secure.  This would defeat the purpose of securing your device.

    This is correct.

    Regards,

    Vivek Singh

  • So, assuming the GRABSECT and GRABRAM locations are programmed, does a secure program have access to GS RAM or M0/M1/D0/D1 RAM? Would you need to do the dummy reads, supply the passwords to get access to the "non-secure RAM" or is "out of bounds" for a program that is running in secure mode?
  • Yes, secure program has access to all non-secure memories (RAM as well as flash sectors). D0/D1 is secure RAM so access will depend if access is made from which zone. If same zone then access is allowed otherwise no. Once security initialization is done (part of BOOTROM code or Gel file), non-secure RAM are accessible from everywhere. No need to unlock the zone (using password) for that.

    Regards,

    Vivek Singh
  • There is an FAQ for previous CSM: processors.wiki.ti.com/.../Code_Security_Module_FAQ_for_C2000
    Any chance of a sequel being written for the F2837x and F28004x?
  • Todd,

    We do not have wiki page for this. Is there any info which you are not able to find in TRM?

    Regards,
    Vivek Singh