Skip to content

Commit f74c67f

Browse files
SebastianBoerlubos
authored andcommitted
doc: ironside: Align APPROTECT with other UICR registers.
Align APPROTECT docs with other UICR registers. Signed-off-by: Sebastian Bøe <[email protected]>
1 parent 77497ca commit f74c67f

File tree

1 file changed

+24
-25
lines changed

1 file changed

+24
-25
lines changed

doc/nrf/app_dev/device_guides/nrf54h/ug_nrf54h20_ironside.rst

Lines changed: 24 additions & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -101,31 +101,30 @@ It is not possible to boot the vendor-specified recovery firmware if the integri
101101
UICR.APPROTECT
102102
==============
103103

104-
You can configure several access ports (APs) through UICR.
105-
UICR.APPROTECT controls debugger access when connected to an AP, specifically the settings in the TAMPC peripheral.
106-
Set all APs to UICR_APPROTECT_PROTECTED to get a protected device.
107-
108-
The following table shows the configuration of the TAMPC peripheral for each AP.
109-
110-
+-----------+-----------+-----------+-----------+-----------+-----------+-------------------------------+
111-
| TAMPC.DOMAIN[n] | TAMPC.AP[n] | Configuration |
112-
+-----------+-----------+-----------+-----------+-----------+-----------+ +
113-
| DBGEN | NIDEN | SPIDEN | SPNIDEN | DBGEN | SPIDEN | |
114-
+===========+===========+===========+===========+===========+===========+===============================+
115-
| 0 | 0 | 0 | 0 | 0 | 0 | UICR_APPROTECT_PROTECTED |
116-
+-----------+-----------+-----------+-----------+-----------+-----------+-------------------------------+
117-
| 1 | 1 | 1 | 1 | 1 | 1 | UICR_APPROTECT_UNPROTECTED |
118-
+-----------+-----------+-----------+-----------+-----------+-----------+-------------------------------+
119-
120-
+-----------+-----------+-----------+-----------+-----------+--------------------------------+
121-
| TAMPC.CORESIGHT | Configuration |
122-
+-----------+-----------+-----------+-----------+-----------+ +
123-
| DEVICEEN | DBGEN | NIDEN | SPIDEN | SPNIDEN | |
124-
+===========+===========+===========+===========+===========+================================+
125-
| 0 | 0 | 0 | 0 | 0 | UICR_APPROTECT_PROTECTED |
126-
+-----------+-----------+-----------+-----------+-----------+--------------------------------+
127-
| 1 | 1 | 1 | 1 | 1 | UICR_APPROTECT_UNPROTECTED |
128-
+-----------+-----------+-----------+-----------+-----------+--------------------------------+
104+
UICR.APPROTECT controls debugger and access-port permissions through the TAMPC peripheral.
105+
The configuration consists of separate registers for each access port, allowing independent control over debugging capabilities for different processor domains and CoreSight access.
106+
107+
The UICR.APPROTECT configuration consists of the following sub-registers:
108+
109+
UICR.APPROTECT.APPLICATION
110+
Controls access port protection for the application domain processor.
111+
This setting determines whether the debugger can access the application domain memory, registers, and debug features.
112+
113+
UICR.APPROTECT.RADIOCORE
114+
Controls access port protection for the radio core processor.
115+
This setting determines whether the debugger can access the radio core memory, registers, and debug features.
116+
117+
UICR.APPROTECT.CORESIGHT
118+
Controls access port protection for the CoreSight debug infrastructure.
119+
This setting determines whether system-level trace features are accessible.
120+
121+
Each of these sub-registers accepts the following values:
122+
123+
* ``UICR_MAGIC_ERASE_VALUE`` - Full debug access is enabled, allowing unrestricted use of debugging tools and memory access.
124+
* ``UICR_PROTECTED`` - Debug access is disabled, preventing debugger connection and protecting the device from unauthorized access.
125+
126+
.. note::
127+
To fully protect a production device, set all three sub-registers (APPLICATION, RADIOCORE, and CORESIGHT) to ``UICR_PROTECTED``.
129128

130129
UICR.ERASEPROTECT
131130
=================

0 commit comments

Comments
 (0)