Debug autentification with certificate on STM32H563

[Heinz_Baumer]

Hi.

How can i connect a debug session to a device with product-state: closed and non secure software (no TZ active)

without full regression.

I have create the password.bin file and two certificate files with TrustZone Package Creator:

• - DA with password
• - DA with certificate

But i can't get a connetion to the device, neither with the password nor with the certificate file.

The message is: Wrong key file path.
But the key-file exist's and the path exists.

Does anyone know, how to connect?

     -------------------------------------------------------------------
                       STM32CubeProgrammer v2.18.0                  
     -------------------------------------------------------------------

Permission request submitted : 2 

Warning: Wrong key file path: D:\Projekte\ST\Product_State_Protection\password.bin 

Certificate file path submitted : D:\Projekte\ST\Product_State_Protection\DAH5_ConfigWithPassword.obk 


Start Debug Authentication Sequence

Open SDM Lib
SDMOpen                       :   624 : open       : SDM API v1.0

SDMOpen                       :   625 : open       : SDM Library version v1.2.0

open_comms                    :   513 : open       : Asserting target reset

open_comms                    :   517 : open       : Writing magic number

open_comms                    :   537 : open       : De-asserting target reset

open_comms                    :   584 : open       : Communication with the target established successfully

discovery: permission if authorized...........:(a/14) ==> Full Regression
SDMOpen                       :   624 : open       : SDM API v1.0

SDMOpen                       :   625 : open       : SDM Library version v1.2.0

open_comms                    :   513 : open       : Asserting target reset

open_comms                    :   517 : open       : Writing magic number

open_comms                    :   537 : open       : De-asserting target reset

open_comms                    :   584 : open       : Communication with the target established successfully

[00%]	discovery command
[10%]	sending discovery command
[20%]	receiving discovery
[40%]	loading credentials

 

[Frantz LEFRERE · Accepted solution]

Dear @Heinz_Baumer ,

on the STM32H563, if you do not activate Trustzone, then only password DA is possible ( certificate authentication not available).

When using the password method, only a full regression is possible.

https://www.st.com/resource/en/application_note/an6008-getting-started-with-debug-authentication-da-for-stm32-mcus-stmicroelectronics.pdf

So if you want to have the capability to reopen the debugging link, you need to activate Trustzone and use DA certificate.

Best regards,

Frantz