Skip to main content
Heinz_Baumer
Associate II
February 7, 2025
Solved

Debug autentification with certificate on STM32H563

  • February 7, 2025
  • 1 reply
  • 702 views

Hi.

How can i connect a debug session to a device with product-state: closed and non secure software (no TZ active)

without full regression.

 

I have create the password.bin file and two certificate files with TrustZone Package Creator:

  • - DA with password
  • - DA with certificate

But i can't get a connetion to the device, neither with the password nor with the certificate file.

The message is: Wrong key file path.
But the key-file exist's and the path exists.

 

Does anyone know, how to connect?

 

 

 

 

 -------------------------------------------------------------------
 STM32CubeProgrammer v2.18.0 
 -------------------------------------------------------------------

Permission request submitted : 2 

Warning: Wrong key file path: D:\Projekte\ST\Product_State_Protection\password.bin 

Certificate file path submitted : D:\Projekte\ST\Product_State_Protection\DAH5_ConfigWithPassword.obk 


Start Debug Authentication Sequence

Open SDM Lib
SDMOpen : 624 : open : SDM API v1.0

SDMOpen : 625 : open : SDM Library version v1.2.0

open_comms : 513 : open : Asserting target reset

open_comms : 517 : open : Writing magic number

open_comms : 537 : open : De-asserting target reset

open_comms : 584 : open : Communication with the target established successfully

discovery: permission if authorized...........:(a/14) ==> Full Regression
SDMOpen : 624 : open : SDM API v1.0

SDMOpen : 625 : open : SDM Library version v1.2.0

open_comms : 513 : open : Asserting target reset

open_comms : 517 : open : Writing magic number

open_comms : 537 : open : De-asserting target reset

open_comms : 584 : open : Communication with the target established successfully

[00%]	discovery command
[10%]	sending discovery command
[20%]	receiving discovery
[40%]	loading credentials

 

 

 

 

 stm32cubeide_rV2jj6lTVp.jpg

 

 

 

Best answer by Frantz LEFRERE

Dear @Heinz_Baumer ,

on the STM32H563, if you do not activate Trustzone, then only password DA is possible ( certificate authentication not available).

When using the password method, only a full regression is possible.

https://www.st.com/resource/en/application_note/an6008-getting-started-with-debug-authentication-da-for-stm32-mcus-stmicroelectronics.pdf

So if you want to have the capability to reopen the debugging link, you need to activate Trustzone and use DA certificate.

Best regards,

Frantz 

1 reply

Frantz LEFRERE
Frantz LEFREREBest answer
ST Employee
February 7, 2025

Dear @Heinz_Baumer ,

on the STM32H563, if you do not activate Trustzone, then only password DA is possible ( certificate authentication not available).

When using the password method, only a full regression is possible.

https://www.st.com/resource/en/application_note/an6008-getting-started-with-debug-authentication-da-for-stm32-mcus-stmicroelectronics.pdf

So if you want to have the capability to reopen the debugging link, you need to activate Trustzone and use DA certificate.

Best regards,

Frantz