As aforementioned, Key Provision permanently converts HS-FS device to HS-KP by supplying a user key certificate to replace the default TI-provided key certificate.

The process on the Flash Programmer is as follows:

• Start the flash programmer, wait for flash kernel to be downloaded onto the device and prompts the user with options listed in Figure 6-1.
• Select Load HSMRt Image (option 2), wait until completion.
• Select Load HSM keys (option 3), wait until completion.
• Perform a power-on reset.

In this process, HSMRt can use the default TI-signed key certificate as the device is still in HS-FS. Flash kernel won't be authenticated in HS-FS so any certificate suffice, and the HSM key certificate need to be signed by a custom key.

The necessary parameters are -d (--device), -p (--port), -k (--kernel), -r (--hsmrt), -f (--hsmkeys).

For instance:

uart_flash_programmer.exe -d f29h85x -p COM41 --kernel ex3_uart_flash_kernel.bin --hsmrt HSM_runtimeImage.bin --hsmkeys HSM_customKeyCert.bin 

For procedures and important notes on building the flash kernel, refer to Section 3.2.