Foreground Secure Boot Flag HSM2HTF.0 is set by HSM BOS or HSM User Code

Tip / Sign in to post questions, reply, level up, and achieve exciting badges. Know more

cross mob
User9635
Level 4
Level 4
50 replies posted 50 questions asked 25 replies posted
Hello Support,

With SSWWAIT=1, there is Foreground Secure Boot feature enabled in HSM.
Looks like Host SSW Software will check for HSM2HTF.0 as 1 before jumping from Host SSW to Host User Code.
During background secure boot [SSWWAIT=0], HSM2HTF.0=1 is done by HSM BOS Code [HSM ROM Code] unconditionally.
Question is during foreground secure boot [SSWWAIT=1], which code set HSM2HTF.0? Is it done by HSM User Code and never done by HSM BOS Code?
I am assuming yes.
Please confirm.

Best Regards
0 Likes
3 Replies
Harvey
Employee
Employee
Yes, your assumption is right.

After finish HSM BOS code, secure boot operation can be started in HSM user code.
In the HSM user code, HSM2HTF value is configured after finish secure boot operation
0 Likes
User9635
Level 4
Level 4
50 replies posted 50 questions asked 25 replies posted
Hello Support,
In the attached HSM BOS Code Flowchart, I am unable to find the step where HSM2HTF.0=1 for SSWWAIT=0 [Background Secure Boot] is being done.
Can you please provide me a better flowchart of HSM BOS Code where SSWWAIT=0 condition is checked and HSM2HTF.0=1 being set is also shown?

Best Regards
0 Likes
Harvey
Employee
Employee
Sorry to say that we don't provide additional flowchart.

As you checked from manual, already explained how can MCU operate based on SSWWAIT value.
0 Likes