How to fuse nRF9160 debug port?

RE: How to fuse nRF9160 debug port?

Bjorn191023 — Thu, 06 Feb 2020 13:06:00 GMT

Thanks for great support!

RE: How to fuse nRF9160 debug port?

Stian Røed Hafskjold — Thu, 06 Feb 2020 12:50:21 GMT

The nRF52840 does not have the ERASEPROTECT register. So while you can have full read back protection, and make it impossible to alter the FW in some way through the SWD port; there will always be a possibility to do a full erase of the chip, and then flash another firmware.

RE: How to fuse nRF9160 debug port?

Bjorn191023 — Thu, 06 Feb 2020 12:39:00 GMT

Thanks for your response Stian,

I agree, considering code injection the LOCK register is important!

Can you confirm that it is possible to fuse the nRF52840 debug port in the same way?

BR / Björn

RE: How to fuse nRF9160 debug port?

Stian Røed Hafskjold — Thu, 06 Feb 2020 12:30:53 GMT

Hi, the APPROTECT and ERASEPROTECT in UICR alone will block all access and the possibility to erase all from outside. If there is no predefined mechanism in the FW which can write a non-zero value to the ERASEPROTECT.DISABLE register, it will be impossible to access the chip again.

The ERASEPROTECT.DISABLE is set to 0 by default so it's not necessary to write to this register at startup. But it wouldn't hurt to set this to 0 again, if you want to be 100% sure.

The LOCK register prevents anything in the FW to write to the DISABLE register, so that is more important IMO. In case of code injection of some sort, even though that would be very theoretical.