Introduction

In HS-SE device, the JTAG debug port is closed by default. The user can do runtime debug unlock by sending a TISCI message with a signed debug certificate. This example demonstrates how to do runtime JTAG port unlock. If the JTAG is unlocked, the example passes. The example is supported only on HS-SE device.

Refer TISCI documentation for more details about the API.

Note: Only hosts allowed in security board configuration can send jtag unlock message via TISCI. Before running the example change the "jtag_unlock_hosts" parameter in the "source/drivers/sciclient/sciclient_default_boardcfg/am62ax/sciclient_defaultBoardcfg_security.c" as follows,

.jtag_unlock_hosts = {TISCI_HOST_ID_A53_0, 0, 0, 0},

Supported Combinations

Parameter	Value
CPU + OS	a53ss0-0 freertos
Toolchain	ti-arm-clang
Boards	am62ax-sk
Example folder	examples/security/runtime_debug_unlock

Steps to Run the Example

Generate debug certificate

Generate the debug certificate for your HSSE device using SYSFW Secure Debug Certificate Generation tool.

Build the example

When using CCS projects to build, import the CCS project for the required combination and build it using the CCS project menu (see Using SDK with CCS Projects).
When using makefiles to build, note the required combination and build using make command (see Using SDK with Makefiles)
As the JTAG is closed, the example can not be loaded through CCS. It can be flashed and booted through any Secondary Bootloader (SBL).
For example, refer Flash an example application to boot through SBL OSPI.

Sample Output

Shown below is a sample output when the application is run,

Runtime debug unlock example!
Run time JTAG debug unlock... DONE !!!
All tests have passed!!