Introduction to lifecycle management on STM32H503 product lines using FlashPro/GangPro-ARM programmer.

• FlashPro-ARM programmer has and GangPro-ARM programmers have full support for Debug authentication on STM32H503 product lines

• All STM32H503 MCU product states are supported, including provisioning with password management and full regression.

...

Preparing necessary files using STM32CubeMX

To perform provisioning with password management , the *.bin file with password or password HASH is needed.

...

• password.bin - file with password

• Board_password.bin -HASH of user password

Also possible is write password in software from keyboardIt is also possible to hand-type a password in the FlashPro-ARM software security configuration utility.

Supported operations by FlashPro/GangPro-ARM

1. Lifecycle and provisioning with password management

...

• Open FlashPro-ARM

...

• Open FlashProor GangPro-ARM software

• Select STM32H503 MCU

• 

• Open Setup->Memory Protection dialog

• Go to Lifecycle management tab

  • Check “Set product state enable” checkbox

  • Set finale product state

    

• Use “DA/PROV” button (this step is optional, however without password management, full regression is not possible after moving to a higher lifecycle state). The password cannot be updated after this stepprovisioning.

  • Set source of password of hash file

    • file with password hash(Hash file option)

    • file with password(Password file option)

    • type password from keybord(User Password option

• After type source password Press “Ok” button in STM32 Debug authentication tab

...

Afterwards use “AUTO PROG” or “Lock Device” buttons in the FlashPro-ARM programmer Main GUI to put MCU to selected state and perform password management operation.

...

To perform full regression:

• Open FlashPro-ARM or GangPro-ARM software

• Select STM32H503 MCU

• Open Setup->Memory Protection tab

• Go to lifecycle management tab

• Use “DA/PROV” button

  • set of password source

    • file with password hash(Hash file option)

    • file with password(Password file option)

  • to unlock device in this step cannot pick hash option.

    

...

To perform the discover operation:

• Open FlashPro-ARM or GangPro-ARM software

• Select STM32H503 MCU

• Open Setup->Memory Protection tab

• Go to lifecycle management tab

• Use “Discover” button

  • In window “Debug Authentication” use “Discover” button to read information from MCU

    • Device ID- id connected MCU

    • Life Cycle - current MCU state

    • Integrity status - provisiong provisioning status(in STM32H503xx is always 0xFFFFFFFF)

      

Useful links

Elprotronic ST Microelectronics programmer’s page

[1] Flash and Gang Programmers for ST Microelectronics

STMicroelectronics application notes and user manuals:

[1] Debug authentication for STM32H503 product lines

[2] How to start with DA access on STM32H503

...