Thanks for your comments.But I still have a concern: in production devices, the ICE will be disabled. Does that means there are no way to enable it again, and there is no way to control the device through JTAG port anymore. I am still looking for a method to dynamically control the access of JTAG interface, by password, or something else. I am stiil not sure if it workable that we disable the JTAG interface in reset stage and enable it by ROM code in later stage.Thanks!