• State Verified Answer
  • Replies 4 replies
  • Subscribers 94 subscribers
  • Views 84 views
  • Users 0 members are here
Attachments (0)
Nordic Case Info
  • Case ID: 361877
Options

Clarification on nRF54L15 ERASEPROTECT

Bipinv2000

Hi Nordic Support,

I have a question regarding the nRF54L15 security features.

If APPROTECT, SECUREAPPROTECT, and ERASEPROTECT are enabled (with ERASEPROTECT.LOCK set), is it still possible for someone with physical SWD access (using J-Link or nRF Connect Programmer) to perform an Erase All and program their own firmware without cooperation from the running firmware?

My goal is to ensure that unauthorized users cannot erase or reprogram the device through SWD.

Could you please confirm whether this is possible and recommend the best configuration for production?

Thank you.

Bipin kumar

  • 0

    Hi Bipin,

    If all three are enabled, it should not be possible for someone with SWD access to perform an Erase All and then reprogram. ERASEPROTECT requires both the debugger and the on-board firmware to disable it, just physical SWD access isn't enough. You can read more about each Device Protection method in our technical documentation. 

    As for what configuration, at minimum use APPPROTECT and ERASEPROTECT.

    Just be very careful when enabling the two together as if you do not have a firmware running on the nRF to unlock the ERASEPROTECT or APPROTECT you will no longer be able to reprogram your chip. 

    SECUREAPPPROTECT adds another layer of security on top in case APPPROTECT is not fully locked, also does not cost extra as it is just one more UICR write. If you also use ERASEPROTECT.LOCK, that means NOTHING, not even your own firmware can disable erase protection until a hardware reset. If you wish to use that as well, we recommend you call it as early in your start up code as possible, once the firmware has determined it does not need to communicate with a debugger over the CTRL-AP mailbox. 

    Best regards,

    Adam

  • 0 in reply to Adam Le

    Hi,

    Just to confirm my understanding:

    If I enable APPPROTECT + ERASEPROTECT (and optionally SECUREAPPPROTECT), and later lose the firmware or key/mechanism required to disable ERASEPROTECT, does that mean the device is permanently locked? In that case, would there be no method to recover the chip or program new firmware again—not even through Nordic support or factory tools?

    I just want to be absolutely sure before enabling these protections, since an incorrect configuration could make the device unrecoverable.

    Thank you.

  • 0 in reply to Bipinv2000

    Essentially yes. If you lose the mechanism to provide ERASEPROTECT.DISABLE, there will be no method to recover the chip. This is a deliberate security design. That is why you should ensure you have a reliable way to write to the register before enabling both APPPROTECT and ERASEPROTECT simultaneously.

    Br, 

    Adam

Related
Terms of service