56F8013 datasheet(84/125 Pages) FREESCALE

84 / 125 page

56F8013/56F8011 Data Sheet, Rev. 10

Freescale Semiconductor

Preliminary

7.1 Operation with Security Enabled

Once the user has programmed the Flash with his application code, the 56F8013/56F8011 can be secured

by programming the security bytes located in the FM configuration field, which are located at the last nine

words of Program Flash. These non-volatile bytes will keep the part secured through reset and through

power-down of the device. Only two bytes within this field are used to enable or disable security. Refer to

the Flash Memory chapter in the 56F801X Peripheral User Manual for the state of the security bytes and

the resulting state of security. When Flash security mode is enabled in accordance with the method

described in the Flash Memory module chapter, the 56F8013/56F8011 will disable the core EOnCE debug

capabilities. Normal program execution is otherwise unaffected.

7.2 Flash Access Lock and Unlock Mechanisms

The 56F8013/56F8011 have several operating functional and debug modes. Effective Flash security must

address operating mode selection and anticipate modes in which the on-chip Flash can be read without

explicit user permission.

7.2.1

Disabling EOnCE Access

On-chip Flash can be read by issuing commands across the EOnCE port, which is the debug interface for

the 56800E CPU. The TCLK, TMS, TDO, and TDI pins comprise a JTAG interface onto which the

EOnCE port functionality is mapped. When the 56F8013/56F8011 boot, the chip-level JTAG TAP (Test

Access Port) is active and provides the chip’s boundary scan capability and access to the ID register, but

proper implementation of Flash security will block any attempt to access the internal Flash memory via

the EOnCE port when security is enabled.

7.2.2

Flash Lockout Recovery Using JTAG

If a user inadvertently enables security on the 56F8013/56F8011, the only lockout recovery mechanism is

the complete erasure of the internal Flash contents, including the configuration field, and thus disables

security (the protection register is cleared). This does not compromise security, as the entire contents of

the user’s secured code stored in Flash are erased before security is disabled on the 56F8013/56F8011 on

the next reset or power-up sequence.

To start the lockout recovery sequence, the JTAG public instruction (LOCKOUT_RECOVERY) must

first

shifted

into

the

chip-level

TAP

controller’s

instruction

Once

the

LOCKOUT_RECOVERY instruction has been shifted into the instruction register, the clock divider value

must be shifted into the corresponding 7-bit data register. After the data register has been updated, the user

must transition the TAP controller into the RUN-TEST/IDLE state for the lockout sequence to commence.

The controller must remain in this state until the erase sequence has completed. Refer to the 56F801X

Peripheral User Manual for more details, or contact Freescale.

Note:

Once the lockout recovery sequence has completed, the user must reset both the JTAG TAP controller

(by advancing the TAP state machine to the reset state) and the 56F8013/56F8011 (by asserting

external chip reset) to return to normal unsecured operation.

56F8013 Datasheet(PDF) 84 Page - Freescale Semiconductor, Inc

56F8013 Datasheet(HTML) 84 Page - Freescale Semiconductor, Inc

Html Pages

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 ...More

Datasheet Download

Link URL