Page Comparison

...

1. Preparing necessary files:

1. Preparation of the keys Encryption key and Encryption nonce files (AES128Key.bin and Nonce.bin) - both files can be generated using STM32TrustedPackageCreator (SFI tab). To generate Encryption nonce file and Encryption key file, proceed as follows:

   • Open Trusted Package Creator and select SFI

   • Open SFI tab

   • Press “Generate” buttons(red arrows) and set destination place for generated files

...

2. Preparation of Option Bytes Config file (OptionBytesSetting.csv) - file can be generated using STM32TrustedPackageCreator (SFI Option Bytes tab).
   To generate Option Bytes Config file file, proceed as follows:

   • Open Trusted Package Creator and select SFI

   • Open SFI Option Bytes tab

   • Select target microcontroller

   • In window set finall option bytes configuration after secure firmware install operation

   • Press “Open Option Bytes File” button and set destination place for generated file

...

3. Preparation of firmware files (firmware.bin, .hex, .srec, etc.)

4. Preparation of an encrypted firmware binary file (*.sfi) using STM32TrustedPackageCreator (SFI tab) or STM32TrustedPackageCreator_CLI (-sfi option), keys, option bytes config file and input firmware are necessary in this step.

5. Programming HSM modules with a limited number of licenses using STM32TrustedPackageCreator (HSM tab) or STM32TrustedPackageCreator_CLI (-hsm option), keys (AES128Key.bin and Nonce.bin) are necessary in this step and they must be the same as for firmware encryption.

2. Programming flash memory and option bytes using FlashPro-ARM/GangPro-ARM on Windows

...