Retrieving an asset from SICR is called a push. During a push, KMU copies data from SICR to the destination address that was determined during provisioning.
A key slot can be pushed only when it is in the PROVISIONED state and if it is not push-blocked. For more details on push-block, see Push block.
To push a key slot, perform the following steps:
If the push is successful, KMU generates the PUSHED event. If the keyslot is in the REVOKED state, KMU generates the REVOKED event. If unsuccessful, KMU generates the ERROR event.
Note: Some push operations generate the PUSHED event
when data is not successfully copied to the destination. For example, when the CRACEN
SEEDLOCK register is set to enabled, write operations to the CRACEN SEED
register are ignored.