3.2.2 Software setup
This section lists the minimum requirements for the developer to set up the SDK on
a Windows
®
10 host, run the sample scenario and customize applications delivered in
STM32Cube_FW_U585_Security_certification_V1.0.0 software package.
STM32Cube_FW_U585_Security_certification_V1.0.0 software package
Copy STM32Cube_FW_U585_Security_certification_V1.0.0 software package on the Windows
®
host hard disk,
for example at C:\data, or any other path that is short enough and without any space.
Development toolchains and compilers
In the context of the security certification, the TFM tests are performed using IAR Systems
®
projects delivered in
the STM32Cube_FW_U585_Security_certification_V1.0.0 software package, so IAR Embedded Workbench
®
tool
(version 8.50.6) must be installed on the host, together with the IAR Embedded Workbench
®
patch to support
STM32U585xx devices (EWARMv8_STM32U57x-58x_V0.10.zip located in the software package in the Utili
ties\PC_Software\IDEs_Patches\EWARM directory).
Software tools for programming STM32 microcontrollers
STM32CubeProgrammer (STM32CubeProg) is an all-in-one multi-OS software tool for programming STM32
microcontrollers. It provides an easy-to-use and efficient environment for reading, writing, and verifying device
memory through both the debug interface (JTAG and SWD) and the bootloader interface (UART and USB).
STM32CubeProgrammer offers a wide range of features to program STM32 microcontroller internal memories
(such as Flash, RAM, and OTP) as well as external memories. STM32CubeProgrammer also allows option
programming and upload, programming content verification, and microcontroller programming automation through
scripting.
STM32CubeProgrammer is delivered in GUI (graphical user interface) and CLI (command-line interface) versions.
The STM32CubeProgrammer tool version to use for the TFM tests in the context of the security certification is
v2.8.0 (v2.8.0-A01 preliminary version).
For more details about STM32CubeProgrammer, refer to UM2237.
Terminal emulator
A terminal emulator software is needed to run the non-secure application. It allows displaying some debug
information to understand operations done by the embedded applications and it allows to interact with the
non‑secure application to trig some operations.
The example in this document is based on Tera Term, an open‑source free software terminal emulator that can
be downloaded from the https://osdn.net/projects/ttssh2/ webpage. Any other similar tool can be used instead
(Ymodem protocol support is required).
3.3
Secure installation
The STM32U585xx product preparation is done in 4 steps, to get a complete installation with security fully
activated, the 4 steps must be done as security protections are only configured at the very last step:
• Step 1: STM32U585xx chip initialization
• Step 2: Software compilation
• Step 3: Software programming into the STM32U585xx chip internal Flash memory
• Step 4: STM32U585xx static security protection configuration
Refer to UM2851, for the description of the four steps of the secure installation procedure.
In the context of security certification, the TFM_SBSFU_Boot project must be compiled in production mode.
UM2852
Secure installation
UM2852 - Rev 1
page 7/27