Hi everyone,
I am working to setup the TZASC on I.MX6UL based dev platform platform.
I did the following.
- Running SPL bootloader from OCRAM
- Disable the bypass (by setting GPR9's bit 0 to 1 on my boards).
- Setup 2 regions
* Region 0 - Base 0x1, size 2GB, Permission: Secure Read/Write permission
* Region 1 - Base 0x80800000,, size 8MB, Permission : Secure Read/Write
Note: Above Region 1 is load address of Kernel OS image, just to test TZASC functionality I used this region and gave Secure Read/Write access
With the above configuration I booted the board, but system reads and loads Kernel OS into that address location(0x80800000) without throwing any error.
Can you please confirm the steps I did is proper ?
Read some where in community that TZASC registers can be configured only in Secure state and not in Non-Secure state.
Is that the reason my configuration is not working ?.
How Can I confirm the bootloader running from OCRAM is in Secure State.
I think the reason is, you are still in secure mode and therefore you have access to region 1. On reset you are in secure mode and you need to switch to non-secure via monitor mode.