LPC55Sxx - FlashPro-ARM - GangPro-ARM - Secure Binary

Owned by Grzegorz Meller (Unlicensed), created
Last updated: Jun 29, 2022
3 min read

Preparing the environment for programming with a secure binary file.

Programming with SB file requires UART and high state on ISP pin.
You must have the files/data prepared:

  • Secure Binary file with the extension .sb.

  • CMPA data,

  • CFPA data,

  • SBKEK.

All previously mentioned files/data are for example generated by MCUXpresso Secure Provisioning Tool.

 Instructions

  • Open FlashPro-ARM / GangPro-ARM.

  • Select the appropriate “Microcontroller Type”. Only LPC55Sxx can use the protected binary file.

  • Click “Open Code File”.

  • Select cfpa.bin. CFPA - Customer In-field Programmable Area. In this file is nessesary configuration.

  • Write BASE address (For LPC55S0xx and LPC55S1xx - 0x3DE00, for LPC55S2xx and LPC55S6xx - 0x9DE00) and click “OK”.

  • In the main window click “Append”.

  • Select cmpa_sealed.bin or cmpa_non_sealed.bin. CMPA - Customer Manufacturing/Factory
    Programmable Area. In this file is nessesary configuration. The option of whether SEAL CMPA MUST be selected later.

  • Write BASE address. (For LPC55S0xx and LPC55S1xx - 0x3E400, for LPC55S2xx and LPC55S6xx - 0x9E400) and click “OK”

  • Open “Setup” => “Memory Protection”.

  • Select “User-Defined” or “Code File”.

  • Check “Write CFPA_EN”, “Write CMPA_EN”, “Write Key_Store_Area_EN” and “Write Secure Binary”. This will allow the device to be fully programmed.

  • Select “Customer Field Programmable Area - CFPA”.

  • Enter the necessary data. Check “Protection register EN” for all abilities. Next click “OK”.

  • Select “Customer Manufacturing/Factory Configuration Area - CMPA”.

  • Enter the necessary data. Check “Protection register EN” for all abilities. If you want, you can check "SEAL_PART" (this operation is irreversible!!). Next click “OK”.

  • Select “Key Store Area”.

  • Cheak “Enroll the PUF” and “SBKEK - EN”. Enter the SBKEK key and any cheak other necessary keys. You can enter the SBKEK, using the "Open Secure Binary KEY" button. Only hex fields are valid! Next click “OK”.

  • Select “Open Secure Binary Code”.

  • Open yournamefile.sb file.

  • In the main protection window click “OK”.

  • Cheak Memory Protection - “Enable”.

  • Click “AUTO PROG. (F8)”.