SPRUJ79 November 2024 F29H850TU , F29H859TU-Q1
Each Flash bank in the C29x application subsystem has two regions that contain information which configures the SSU: SECCFG and BANKMGMT. These regions are separate from the main Flash sectors, and do not count against the stated available Flash memory for application use. SECCFG is used for storing the SSU configuration, also known as the User Protection Policy (UPP). BANKMGMT is used for managing Flash updates using the Firmware-Over-The-Air (FOTA) or Live Firmware Update (LFU) mechanisms.
The configuration settings stored in these Flash regions are loaded into the SSU registers at device startup. Most UPP settings cannot be modified by the application during run time. To modify the UPP, the application or connected debugger must erase and re-program SECCFG with the desired settings. See Section 10.9 for details on protection mechanisms to prevent unauthorized updates to these sectors. Section 10.13 contains details on run-time access permissions for individual SSU registers.
Texas Instruments recommends using the SysConfig tool, included as part of the device MCU-SDK, to configure the SSU and generate user security settings. This tool provides an easy-to-use graphical user interface to create application security partitions and protection definitions, and automatically generates linker command files, a SECCFG image, and header files to be included in the user application.