Instances
| Instance | Domain | Base address | TrustZone | Split access | Description | ||
|---|---|---|---|---|---|---|---|
| Map | Att | DMA | |||||
| KMU | GLOBAL | 0x50045000 | HF | S | NSA | No |
Key management unit |
Configuration
| Instance | Domain | Configuration |
|---|---|---|
| KMU | GLOBAL |
Number of keyslots is 250 Number of bits per keyslot is 128 |
Register overview
| Register | Offset | TZ | Description |
|---|---|---|---|
| TASKS_PROVISION | 0x0000 |
Provision key slot |
|
| TASKS_PUSH | 0x0004 |
Push key slot |
|
| TASKS_REVOKE | 0x0008 |
Revoke key slot |
|
| TASKS_READMETADATA | 0x000C |
Read key slot metadata into METADATA register |
|
| TASKS_PUSHBLOCK | 0x0010 |
Block only the PUSH operation of a key slot, preventing the key slot from being PUSHED until next reset. The task is kept for backwards compatibility. |
|
| EVENTS_PROVISIONED | 0x100 |
Key slot successfully provisioned |
|
| EVENTS_PUSHED | 0x104 |
Key slot successfully pushed |
|
| EVENTS_REVOKED | 0x108 |
Key slot has been revoked and can no longer be used |
|
| EVENTS_ERROR | 0x10C |
Error generated during PROVISION, PUSH, READMETADATA or REVOKE operations. Triggering the PROVISION, PUSH and REVOKE tasks on a BLOCKED keyslot will also generate this event. |
|
| EVENTS_METADATAREAD | 0x110 |
Key slot metadata has been read into METADATA register |
|
| EVENTS_PUSHBLOCKED | 0x114 |
The PUSHBLOCK operation was successful. The event is kept for backwards compatibility. |
|
| STATUS | 0x400 |
KMU status register |
|
| KEYSLOT | 0x500 |
Select key slot to operate on |
|
| SRC | 0x504 |
Source address for provisioning |
|
| METADATA | 0x508 |
Key slot metadata as read by TASKS_READMETADATA. |