DS-5: How to provide an unlock token?

Hi all -

In the TBSA, 6.10.1.6 Baseline architecture, it states that the "external debug interface receives an unlock token" (presumably via the debugger) to instruct a debug protection mechanism (DPM) to unlock.  Is there any reference material that describes how to do this with DS-5?

Regards, Ted.