Secure Boot STM32H7RS How to Introduction

Revision as of 17:30, 22 March 2024 by Registered User
Under construction.png Coming soon


Target description

The purpose of this article is to provide the background knowledge needed to understand and execute the related "How to start".
This introduction article reviews some technical notions related to this topic.
More detailed explanations are available in the following articles:


1. Introduction

A boot path selection interface is embedded in the STM32CubeMX to help customers to select the boot configuration adapted to their needs.
The STM32CubeFW examples are using the provided script, configuration files, and user application codes.
The STM32CubeMX examples are using implicitly similar configuration files, but the appropriate boot path is chosen graphically through the tool and the initial codes are generated.

  • The STM32H7Rx devices have limited hardware cryptography support. The STiRoT (ST immutable Root of Trust) is not supported
  • The STM32H7Sx devices are supporting full hardware cryptography. All possible boot paths are supported.
  • The STM32CubeMX tool provided by ST is available at the following link: STM32CubeMX installation file.
  • How to proceed practically step by step is explained in the "How To" articles of the table below.

Note: the STM32H7Rx devices are also not embedding the MCE (Memory cipher engine) supporting on-the-fly encryption and decryption of external memory content.


2. STM32H7RS possible boot paths

The figure below shows the possible boot paths for STM32H7RS selected through the related user option byte.


File:H7RS possible bootpaths.png
Figure 1 H7RS possible bootpaths

See table above:

  • The STM32CubeFW provides an example for the boot paths 1, 2 and 4.
  • An example is provided on how to generate a project for boot path 2, from scratch using STM32CubeMx.