SLUUCW9 December 2023 BQ76972
Class | Subclass | Name | Type | Min | Max | Default | Unit |
---|---|---|---|---|---|---|---|
Security | Settings | Security Settings | H1 | 0x00 | 0x07 | 0x00 | Hex |
7 | 6 | 5 | 4 | 3 | 2 | 1 | 0 |
RSVD_0 | RSVD_0 | RSVD_0 | RSVD_0 | RSVD_0 | PERM_SEAL | LOCK_CFG | SEAL |
Description: This parameter contains security-related configuration options.
Bit | Field | Default | Description |
---|---|---|---|
2 | PERM_SEAL | 0 | Setting this bit prevents unsealing the device once it is sealed. If this is not programmed to OTP, this setting is lost on a full reset and the device is again able to UNSEAL.
0 = The device can be unsealed by sending the correct security keys. 1 = The device cannot be unsealed. |
1 | LOCK_CFG | 0 | Setting this bit prevents entry into CONFIG_UPDATE and FULLACCESS modes. This prevents further modifications to the device configuration after CONFIG_UPDATE mode is exited. 0 = Configuration parameters can be changed in CONFIG_UPDATE mode. 1 = Configuration parameters cannot be changed. |
0 | SEAL | 0 | Setting this bit causes the device to enter SEALED mode when reset or exiting CONFIG_UPDATE and DEEPSLEEP modes. In production systems, this bit should be set for security purposes. 0 = Device does not default to SEALED mode. 1 = Device default state is SEALED. |