AN3044

SPC563Mx / SPC564Ax and Flash protection

Doc ID 16196 Rev 2

13/20

4

SPC563Mx / SPC564Ax and Flash protection

SPC56x allows to restrict access to the Flash content. There was a specific focus for the

powertrain variant as due to the type of application, car makers want to prevent engine

tuning.

The following table is summarizing the different possibilities offered by the powertrain

variants of SPC56x when the Flash is protected.

The table shows that when censor control word is not 0x55AA and when the serial control

word is also not 0x55AA, SPC563Mx and SPC564Ax have a very good protection and it is

not necessary to send the Flash password for ECU and PCB level diagnostics.

Debugging and analysis of specific cases that require access to the content of the Flash is

still possible to restricted users.

4.1

Flash protection, shadow Flash and reprogramming

The password is stored in the shadow Flash.

This part of the Flash should have, as far as possible, static information to prevent the need

to reprogram the shadow Flash in the field. Shadow Flash reprogramming is possible but

should be done with care. Mistakes made during the reprogramming sequence can render

the ECU unusable and unaccessible for new reprogramming.

Table 3.

SPC56x Flash access from serial boot mode or from JTAG

Censor control word is not 0x55AA

Censor control word is 0x55AA

Serial boot control word is

not 0x55AA

rest of the device (CPU, RAM, peripherals

are enabled) and JTAG accesses are

enabled.

In run mode, JTAG accesses are disabled

unless private password is entered

In boot mode, Flash is disabled and JTAG

accesses are enabled.

In run mode, JTAG accesses are enabled.

Serial boot control word is

0x55AA

In boot mode, Flash is enabled and JTAG

access is enabled; private password

required for serial boot or to enable JTAG

accesses.

In run mode, JTAG accesses are disabled

unless private password is entered

In boot mode, Flash is enabled and JTAG

access is enabled; private password

required for serial boot or to enable JTAG

accesses.

In run mode, JTAG accesses are enabled.

1.

This mode allows ECU and PCB level diagnostic without requiring the knowledge Flash password.