After Key Provision converts the device into HS-KP, Code Provision can be conducted to either flash CPU1/HSM application or SEC CFG section into the corresponding flash banks.

The process on the Flash Programmer is as follows:

• Start the flash programmer, wait for flash kernel to be downloaded onto the device and prompts the user with options listed in Figure 6-1.
• Select Load HSMRt Image (option 2), wait until completion.
• Select either one of the three options and wait until completion.
  • Program Sec Cfg (option 4)
  • Load HSM Image (option 5)
  • Load C29 CPU1 Image (option 6)
• Continue to perform the other two Code Provision options if needed.

Note that all image (flash kernel, HSMRt, application/sec cfg) requires the user key certificate as part of the binary image. Refer to Section 2.3 on instructions to generate key certificate with custom key.

The necessary parameters are -d (--device), -p (--port), -k (--kernel), and either -t (--cpappcpu1), -g (--cpapphsm), -s (--cpseccfg) depending on the Code Provision options.

For instance:

uart_flash_programmer.exe -d f29h85x -p COM41 --kernel ex3_uart_flash_kernel.bin --hsmrt HSM_runtimeImage.bin --cpseccfg sec_cfg_cert.bin --cpappcpu1 c29_cpu1_application.bin --cpapphsm hsm_application.bin

For procedures and important notes on building the flash kernel for Code Provisioning, refer to Section 3.3.