ST X-CUBE-SBSFU STM32Cube - Figure 17. STM32 L4 Series and STM32 L0 Series Security Configuration (App_Sfu.h); Figure 18. STM32 F4 Series, STM32 F7 Series and STM32 L1

AN5056 Rev 8 23/49
AN5056 SBSFU configuration
48
Figure 17. STM32L4 Series and STM32L0 Series security configuration (app_sfu.h)
Figure 18 shows the various security configuration solutions available in file app_sfu.h for
the STM32F4 Series, STM32F7 Series, and STM32L1 Series.
Figure 18. STM32F4 Series, STM32F7 Series and STM32L1
Series security configuration (app_sfu.h)
MSv51250V3
RDP-L2
DAP/TAMPER
•
Disable external access
•
Protects boot options
• Lock option bytes
• WRP
• PCROP
• BFB2
• Protects the code enabling
the MPU/Firewall
• Protects the code
considered trusted
• Protects part of the Flash
WRP
PCROP
Trust
User
application
Trust
Firewall
• Protects RAM and
Flash at runtime
Trust
Trust
Crypto
• Verify the integrity,
authenticity of the
user application
MPU
• Execution allowed
only inside the chain
of trust
Trust
// #define SECBOOT_DISABLE_SECURITY_IPS
/*!< Disable all security IPs at once when activated */
#if !defined(SECBOOT_DISABLE_SECURITY_IPS)/
#
define SFU_WRP_PROTECT_ENABLE
# define SFU_RDP_PROTECT_ENABLE
# define
SFU_PCROP_PROTECT_ENABLE
# define
SFU_FWALL_PROTECT_ENABLE
# define
SFU_TAMPER_PROTECT_ENABLE
# define
SFU_DAP_PROTECT_ENABLE
# define SFU_DMA_PROTECT_ENABLE
#
define SFU_IWDG_PROTECT_ENABLE
# define
SFU_MPU_PROTECT_ENABLE
# define SFU_MPU_USERAPP_ACTIVATION
#endif