SLUUBY1B December 2020 – April 2022 BQ76942
| Class | Subclass | Name | Type | Min | Max | Default | Unit |
|---|---|---|---|---|---|---|---|
| Security | Settings | Security Settings | H1 | 0x00 | 0x07 | 0x00 | Hex |
| 7 | 6 | 5 | 4 | 3 | 2 | 1 | 0 |
| RSVD_0 | RSVD_0 | RSVD_0 | RSVD_0 | RSVD_0 | PERM_SEAL | LOCK_CFG | SEAL |
Description: This parameter contains security-related configuration options.
| Bit | Field | Default | Description |
|---|---|---|---|
| 2 | PERM_SEAL | 0 | Setting this bit prevents unsealing the device once it is sealed. If this is not programmed to OTP, this setting will be lost on a full reset and the device will again be able to UNSEAL. 0 = The device can be unsealed by sending the correct security keys. 1 = The device cannot be unsealed. |
| 1 | LOCK_CFG | 0 | Setting this bit prevents entry into CONFIG_UPDATE and FULLACCESS modes. This prevents further modifications to the device configuration after CONFIG_UPDATE mode is exited. 0 = Configuration parameters can be changed in CONFIG_UPDATE mode. 1 = Configuration parameters cannot be changed. |
| 0 | SEAL | 0 | Setting this bit causes the device to enter SEALED mode when reset or exiting CONFIG_UPDATE and DEEPSLEEP modes. In production systems, this bit should be set for security purposes. 0 = Device does not default to SEALED mode. 1 = Device default state is SEALED. |