STM32U535NET6QTR datasheet(28/278 Pages) STMICROELECTRONICS

28 / 278 page

Functional overview

STM32U535xx

28/278

DS14217 Rev 1

•

Memory map:

–

SAU is fully secure after reset. Consequently, all memory map is fully secure.

Up to eight SAU configurable regions are available for security attribution.

•

Flash memory:

–

Flash memory security area is defined by watermark user options.

–

Flash memory block based area is nonsecure after reset.

•

SRAMs:

–

All SRAMs are secure after reset. MPCBB (memory protection block based

controller) is secure.

•

External memories:

–

OCTOSPI banks are secure after reset. MPCWMx (memory protection watermark

based controller) is secure.

•

Peripherals

–

Securable peripherals are nonsecure after reset.

–

TrustZone-aware peripherals are nonsecure after reset. Their secure configuration

registers are secure.

•

All GPIOs are secure after reset.

•

Interrupts:

–

NVIC: All interrupts are secure after reset. NVIC is banked for secure and

nonsecure state.

•

TZIC: All illegal access interrupts are disabled after reset.

3.7

Boot modes

At startup, a BOOT0 pin, NBOOT0, NSBOOTADDx[24:0] (x = 0, 1) and

SECBOOTADD0[24:0] option bytes are used to select the boot memory address that

includes:

•

Boot from any address in user flash memory.

•

Boot from system memory bootloader.

•

Boot from any address in embedded SRAM.

•

Boot from RSS (root security services).

The BOOT0 value comes from the PH3-BOOT0 pin or from an option bit depending on the

value of a user option bit to free the GPIO pad if needed.

The bootloader is located in the system memory, programmed by ST during production.

The bootloader is used to reprogram the flash memory by using USART, I2C, SPI, FDCAN

or USB in device mode through the DFU (device firmware upgrade).

The bootloader is available on all devices. Refer to the application note

STM32 microcontroller system memory boot mode (AN2606) for more details.

The RSS are embedded in a flash memory area named secure information block,

programmed during ST production.

For example, the RSS enable the SFI (secure firmware installation), thanks to the RSSe SFI

(RSS extension firmware).

This feature allows customer to produce the confidentiality of the firmware to be provisioned

into the STM32, when production is sub-contracted to untrusted third party.

STM32U535NET6QTR Datasheet(PDF) 28 Page - STMicroelectronics

STM32U535NET6QTR Datasheet(HTML) 28 Page - STMicroelectronics

Html Pages

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 ...More

Datasheet Download

Link URL