5340 protect programs from theft

RE: 5340 protect programs from theft

yoyou — Tue, 21 Feb 2023 01:36:50 GMT

test it on nRF5340-DK

when no call nrf_debug_port_disable()

when call nrf_debug_port_disable() (even no

CONFIG_NRF_APPROTECT_LOCK=y in prj.conf and

ENABLE_APPROTECT in CMakeLists.txt

)

Best regards

RE: 5340 protect programs from theft

Priyanka — Mon, 20 Feb 2023 14:34:20 GMT

Hi,

Have you tried it and does this solve your issue?

-Priyanka

RE: 5340 protect programs from theft

yoyou — Sat, 18 Feb 2023 00:44:19 GMT

ok, now

nrf5340dk_nrf5340_cpuapp

i only add tow line to prj.conf

CONFIG_NRF_APPROTECT_LOCK=y

CONFIG_NRF_SECURE_APPROTECT_LOCK=y

Best regards

RE: 5340 protect programs from theft

Priyanka — Fri, 17 Feb 2023 14:32:41 GMT

Hi,

We recently added this information to the documentation, and it might be helpful:

https://developer.nordicsemi.com/nRF_Connect_SDK/doc/latest/nrf/app_dev/ap_protect/index.html

-Priyanka

RE: 5340 protect programs from theft

yoyou — Fri, 17 Feb 2023 09:04:54 GMT

in CmakeLists.txt add:

zephyr_compile_definitions_ifdef(CONFIG_NRF_APPROTECT_LOCK
ENABLE_APPROTECT)
zephyr_compile_definitions_ifdef(CONFIG_NRF_APPROTECT_USER_HANDLING
ENABLE_APPROTECT_USER_HANDLING)
zephyr_compile_definitions_ifdef(CONFIG_NRF_SECURE_APPROTECT_LOCK
ENABLE_SECURE_APPROTECT)
zephyr_compile_definitions_ifdef(CONFIG_NRF_SECURE_APPROTECT_USER_HANDLING
ENABLE_SECURE_APPROTECT_USER_HANDLING)
zephyr_library_compile_definitions_ifdef(CONFIG_NRF_TRACE_PORT
ENABLE_TRACE)

int prj.conf add:

CONFIG_NRF_APPROTECT_LOCK=y

in main top call nrf_debug_port_disable()

void nrf_nvmc_write_word(uint32_t address, uint32_t value)
{
	// Enable flash write access and wait until the NVMC is ready
    NRF_NVMC->CONFIG = (NVMC_CONFIG_WEN_Wen << NVMC_CONFIG_WEN_Pos);
    while (NRF_NVMC->READY == NVMC_READY_READY_Busy) {;}

    // Write to the register and wait until the NVMC is ready
    *(uint32_t*)address = value;
    while (NRF_NVMC->READY == NVMC_READY_READY_Busy) {;}

	// Disable flash write access and wait until the NVMC is ready
    NRF_NVMC->CONFIG = (NVMC_CONFIG_WEN_Ren << NVMC_CONFIG_WEN_Pos);
    while (NRF_NVMC->READY == NVMC_READY_READY_Busy) {;}
}
void nrf_debug_port_disable(void)
{
	if(NRF_UICR->APPROTECT&0x000000ff)
    {
		printk("\nAccess Port Protection is not enabled --> Enable Access Port Protection now\n");
		/* Enable Access Port Protection
		 * Access through debugger to CPU registers, mapped-memory and RAM will be disabled
		 * To disable protection ERASEALL command must be applied. */
		nrf_nvmc_write_word((uint32_t)&NRF_UICR->APPROTECT, NRF_UICR->APPROTECT&0xffffff00);
		printk("Access Port Protection is now enabled --> Reboot to apply the config...\n");

		// Sleep is only necessary to show the logs before reboot for debug purposes
		k_msleep(2000);

		//NVIC_SystemReset();
		sys_reboot(SYS_REBOOT_COLD);
    }
	else
	{
		printk("\nAccess Port Protection is already enabled\n");
	}
}

Could you please confirm my understanding?

Best regards

RE: 5340 protect programs from theft

Priyanka — Fri, 17 Feb 2023 06:50:29 GMT

Sorry, I had shared the wrong link. Fat fingers! 😛

Here's the link: Allowing debugger access to nRF5340

RE: 5340 protect programs from theft

yoyou — Fri, 17 Feb 2023 02:54:25 GMT

thanks for reply.

i have a look it,

the follow code is for nRF SDK, but i'm using NCS2.0

#ifdef ENABLE_APPROTECT
	if ((NRF_UICR->APPROTECT & UICR_APPROTECT_PALL_Msk) !=
		(UICR_APPROTECT_PALL_Enabled << UICR_APPROTECT_PALL_Pos)) {

        NRF_NVMC->CONFIG = NVMC_CONFIG_WEN_Wen;
        while (NRF_NVMC->READY == NVMC_READY_READY_Busy){}

        NRF_UICR->APPROTECT = ((NRF_UICR->APPROTECT & ~((uint32_t)UICR_APPROTECT_PALL_Msk)) |
		    (UICR_APPROTECT_PALL_Enabled << UICR_APPROTECT_PALL_Pos));

        NRF_NVMC->CONFIG = NVMC_CONFIG_WEN_Ren;
        while (NRF_NVMC->READY == NVMC_READY_READY_Busy){}
   	}
#else
	if ((NRF_UICR->APPROTECT & UICR_APPROTECT_PALL_Msk) !=
		(UICR_APPROTECT_PALL_HwDisabled << UICR_APPROTECT_PALL_Pos)) {

        NRF_NVMC->CONFIG = NVMC_CONFIG_WEN_Wen;
        while (NRF_NVMC->READY == NVMC_READY_READY_Busy){}

        NRF_UICR->APPROTECT = ((NRF_UICR->APPROTECT & ~((uint32_t)UICR_APPROTECT_PALL_Msk)) |
		    (UICR_APPROTECT_PALL_HwDisabled << UICR_APPROTECT_PALL_Pos));

        NRF_NVMC->CONFIG = NVMC_CONFIG_WEN_Ren;
        while (NRF_NVMC->READY == NVMC_READY_READY_Busy){}
	}
#endif

Best regards

RE: 5340 protect programs from theft

Priyanka — Thu, 16 Feb 2023 06:26:53 GMT

Hi,

You can refer this guide.

-Priyanka

RE: 5340 protect programs from theft

yoyou — Thu, 16 Feb 2023 02:20:22 GMT

thanks for reply

about APPROTECT. i do't know how to write code.

Best regards

RE: 5340 protect programs from theft

Priyanka — Tue, 14 Feb 2023 09:04:53 GMT

Hi,

You can read the hex files using the nRF Connect for Desktop -> Programmer App, or using nrfjprog.

nrfjprog --readcode app_flash_dump.hex --coprocessor CP_NETWORK

In order to prevent readout, you can enable the APPROTECT. It is disabled in most of our samples.

Best Regards,

Priyanka