Secure context isolation

Applicable for

STM32MP13x lines, STM32MP15x lines, STM32MP25x lines

---

1. Article purpose

The STM32 MPUs include set of hardware mechanisms to secure the running software. Depending on the SoC family, different isolation management are available.

The following article will focus on the specific management of isolation mechanism per topology:

• Memory isolation
  • TZC internal peripheral on STM32MP1 series
  • ETZPC internal peripheral on STM32MP1 series
  • Resource Isolation Framework overview on STM32MP2 series
• CPU execution level / privilege level isolation
  • Trustzone environment on STM32MP1 series and on STM32MP2 series
• Peripheral isolation
  • ETZPC internal peripheral on STM32MP1 series
  • Resource Isolation Framework overview on STM32MP2 series

Some more complex peripherals directly include security management inside its own registers to manage the isolation level. The secure configuration depends on the global topology used on the MPU family. It is the case for:

• BSEC internal peripheral
• EXTI internal peripheral
• FMC internal peripheral
• GPIO internal peripheral
• HPDMA internal peripheral
• HSEM internal peripheral
• IPCC internal peripheral
• PWR internal peripheral
• RCC internal peripheral
• RTC internal peripheral
• TAMP internal peripheral

Central processing unit

Microprocessor unit