SPRUJ17I March 2022 – August 2025 AM2631 , AM2631-Q1 , AM2632 , AM2632-Q1 , AM2634 , AM2634-Q1
Figure 5-8 shows different stages involved in the HSM RunTime boot
HSM Runtime available at L2 address
SBL sends ‘LoadHSMRt’ message to HSM ROM , message will have L2 address pointing to hsmRT image
HSM ROM validates the certificate
On successful validation of the certificate, HSM ROM copies entire binary from L2 to IRAM address 0x20000
After the binary is copied, HSM ROM validates the image against integrity followed by image decryption (image decryption is optional).
HSM ROM eclipse process is initiated after image validation is success. This involves masking HSM ROM and mapping IRAM start address to 0x0 address
HSM core reset is issued
HSMRt starts execution from 0x0
When HSM gets eclipsed, the IRAM RAM address region is mapped to ROM address region. Address mapping during normal and ROM Eclipse Mode is captured in the below tables.

M4 Address | SCR Hardware Address Translation | Size(KB) | Category |
0x0000 0000 | 0x2000 0000 | 48 | Non-secure ROM |
… | … | ||
0x0000 BFFF | 0x2000 BFFF | ||
0x0001 0000 | 0x2001 0000 | 48 | Secure ROM |
… | … | ||
0x0001 BFFF | 0x2001 BFFF | ||
0x0002 0000 | 0x2002 0000 | 192 | IRAM |
… | … | ||
0x0000 7FFF | 0x2000 7FFF | ||
0x0002 8000 | 0x2002 8000 | ||
… | … | ||
0x0002 FFFF | 0x2002 FFFF | ||
0x0003 0000 | 0x2003 0000 | ||
… | … | ||
0x0003 FFFF | 0x2003 FFFF | ||
0x0004 0000 | 0x2004 0000 | ||
… | … | ||
0x0004 FFFF | 0x2004 FFFF |
M4 Address | SCR + Eclipse Hardware Address Translation | Size | Category |
0x0000 0000 | 0x2002 0000 | 192 KB | RAM |
… | … | ||
… | … | ||
0x0002 FFFF | 0x2004 FFFF | ||
0x0003 0000 | 0x2001 0000 | 64KB | Reserved space |
… | … | ||
0x0003 FFFF | 0x2001 FFFF | ||
0x0004 0000 | 0x2001 0000 | 64KB | Reserved space |
… | … | ||
0x0004 FFFF | 0x2001 FFFF |