STM32 Trusted Package Creator tool, part of STM32CubeProgrammer tool allows the generation of SFI file.
1. Preparing necessary files:
Preparation of the keys (AES128Key.bin and Nonce.bin) ,this files can by generated by STM32 Trusted Package Creator tool
Preparation of Option Bytes Config file(OptionBytesSetting.csv)
Preparation of firmware files(*.bin or *.hex)
2. SFI generation
To validate the SFI generation request, the user has indicate files prepared in first step, select MCU family, set size of RAM memory available for SFI programming, optionaly enable “Generate hash” option(in STM32H7 this is necessery step) and select output file folder. After set all this fields generation SFI is possible.
Useful links
STMicroelectronics application notes and user manuals: