5. Global TrustZone controller (GTZC)

5.1 Introduction

This section describes the global TrustZone controller (GTZC) block, containing the following subblocks:

• • TZSC: TrustZone security controller

This subblock defines the secure/privileged state of target peripherals. The TZSC informs some peripherals, such as RCC or GPIOs, about the secure status of each securable peripheral. It is done by sharing with RCC and I/O logic.

• • MPCBB: Memory protection controller - block based

This subblock configures the internal RAM in a TrustZone-system product having segmented SRAM (pages of 512 bytes) with programmable-security and privileged attributes.

• • TZIC: TrustZone illegal access controller

This subblock gathers all illegal access events in the system and generates a secure interrupt towards NVIC.

These subblocks are used to configure the TrustZone system security in a product. This product has bus agents with programmable-security and privileged attributes such as:

• • On-chip RAM with programmable secure and/or privileged blocks (pages)
• • AHB and APB peripherals with programmable security and/or privileged access
• • Off-chip memories with secure and/or privileged areas

5.2 GTZC main features

The GTZC main features are listed below:

• • Independent 32-bit AHB interface for TZSC, TZIC, and MPCBBs
• • TZIC accessible only with secure transactions
• • Secure and nonsecure access supported for the privileged and unprivileged parts of TZSC and MPCBB
• • Set of registers to define product security settings:
  • – Secure/privileged blocks for internal SRAMs
  • – Secure/privileged access mode for securable peripherals

GTZC TrustZone system architecture

The Armv8-M supports security per TrustZone-M model with isolation between:

• • A secure world, where usually security sensitive applications are run and critical resources are located
• • A nonsecure or public world, such as a usual nonsecure operating system and user space

The TrustZone architecture is extended beyond AHB and Armv8-M with:

• • AHB/APB bridge used as a secure gate to block or propagate secure/nonsecure and privileged/unprivileged transactions towards APB agents

• • PPC (peripheral protection controller) used as a secure gate to block or propagate secure/nonsecure and privileged/unprivileged transactions towards AHB agents
• • TrustZone block-based MPC firewalls used as a secure gate to filter secure/nonsecure, privileged/unprivileged accesses towards internal SRAMs
• • TrustZone watermark MPC firewalls used as a secure gate to filter secure/nonsecure and privileged/unprivileged accesses towards external memories

AHB and APB peripherals can be categorized as:

• • Privileged: peripherals that are protected by an AHB/APB firewall stub. The firewall stub is controlled from TZSC to define privilege properties.
• • Secure: peripherals that are always protected by an AHB/APB firewall stub. These peripherals are always secure (such as TZIC).
• • Securable: peripherals that are protected by an AHB/APB firewall stub. The firewall stub is controlled from TZSC to define security properties (optional).
• • Nonsecure and unprivileged: peripherals that are connected directly to an AHB/APB interconnect without any secure gate.
• • TrustZone-aware: peripherals that are connected directly to an AHB or APB bus, and implement a specific TrustZone behavior (such as a subset of registers being secure). The TrustZone-aware AHB controllers always drive the HNONSEC signal according to their security mode (such as an Armv8-M core or DMA).

Application information

The TZSC, TZIC, and MPCBBs can be used in one of the following ways:

• • They can be programmed during a secure boot only, locked, and not changed afterwards.
• • They can be dynamically reprogrammed when using a specific application code or a secure kernel (microvisor). When they are not locked, the MPCBB secure blocks can be changed by a secure software. The software executes from the secure flash region or secure SRAM. This applies to the GTZC1_TZSC_SECCFGRn/PRIVCFGRn registers that define the secure/privileged state of each peripheral.

The Armv8-M security architecture with secure, securable, and TrustZone-aware peripherals is shown in Figure 13: GTZC block diagram .

Figure 13. GTZC block diagram

5.3 GTZC implementation

The devices embed two instances of GTZC.

Table 25. GTZC features

Table 26 shows the GTZC subblocks address offset versus the GTZC base address (refer to Section 2.3: Memory organization for GTZC base address).

Table 26. GTZC subblocks

Table 27 describes the characteristics of the available MPCBBs.

Table 27. MPCBB resource assignment

5.4 GTZC functional description

5.4.1 GTZC block diagram

Figure 14 describes the combined feature of TZSC, TZIC, and MPCBBs. Each subblock is controlled by its own AHB configuration port.

The TZSC defines which peripheral is secured and/or privileged. The privileged configuration bit of a peripheral can be modified by a secure privileged transaction when the peripheral is configured as secure. Otherwise, a privileged transaction (nonsecure) is sufficient.

On the opposite, the secure configuration bit of a peripheral can be modified only with a secure privileged transaction if the peripheral is configured as privileged. Otherwise, a secure transaction (unprivileged) is sufficient.

The secure configuration bit of a given RAM block can be modified only with a secure privileged transaction if the same RAM block is configured as privileged. Otherwise, a secure transaction (unprivileged) is sufficient.

The TZIC gathers illegal events generated within the system when an illegal access is detected. TZIC can then generate a secure interrupt towards the CPU if needed.

Figure 14. GTZC block diagram

5.4.2 Illegal access definition

Three different types of illegal access (ILA) exist:

• • Illegal nonsecure access

Any nonsecure transaction trying to write a secure resource is considered as illegal. Consequently, the addressed resource generates an illegal access interrupt for illegal write access and a bus error for illegal fetch access. Some exceptions exist on secure and privileged configuration registers: the latter ones authorize nonsecure read access to secure registers. For more details, see the sections about GTZC1_TZSC_SECCFGRn ( GTZC1 TZSC secure configuration register 1 (GTZC1_TZSC_SECCFGR1) ) and GTZC1_TZSC_PRIVCFGRn ( GTZC1 TZSC privilege configuration register 1 (GTZC1_TZSC_PRIVCFGR1) ).

• • Illegal secure access

Any secure transaction trying to access a nonsecure block in an internal block-based SRAM or watermarked memory is considered as illegal.

Correct TZIC settings enable the capture of the associated event, and then generate the GTZC1_IRQn interrupt to the NVIC. This applies to read, write, and execute accesses.

Concerning the MPCBB controller, there is an option to ignore secure data read/write access on nonsecure SRAM blocks. This is done by setting the SRWILADIS bit in the GTZC1_MPCBB_CR register. Secure read and write data transactions are then allowed on nonsecure SRAM blocks, while a secure execution access remains not allowed.

Any secure execute transaction trying to access a nonsecure peripheral register is considered as illegal and generates a bus error.

• • Illegal unprivileged access

Any unprivileged transaction trying to access a privileged resource is considered as illegal. There is no illegal access event generated for an illegal read and write access. The addressed resource follows a silent-fail behavior by returning all zero data for read and ignoring any write. No bus error is generated. A bus error is generated when any unprivileged execute transaction tries to access a privileged memory.

5.4.3 TrustZone security controller (TZSC)

The TZSC is composed of a configurable set of registers. These registers provide the control of a secure and privileged state for all peripherals:

• • GTZC1_TZSC_SECCFGn registers to control AHB/APB firewall stubs for the securable peripherals
• • GTZC1_TZSC_PRIVCFGn registers to control AHB/APB firewall stubs for the privileged peripherals

5.4.4 Memory protection controller - block based (MPCBB)

The MPCBB is composed of a configurable set of registers allowing security and privileged policies to be defined for internal SRAMs. The security and privileged policies can be individually configured per each 512-byte SRAM block.

Figure 15. MPCBB block diagram

To set up the MPCBB, the following actions are, for example, needed at boot time:

• • A secure firmware must define which memory blocks are secure. It is carried out by setting the correct bits in GTZC1_MPCBB_SECCFGn.
• • A privileged firmware must define which memory blocks are privileged. It is carried out by setting the correct bits in GTZC1_MPCBB_PRIVCFGn.

An MPCBB superblock is made of 32 consecutive blocks. For each superblock, a secure application can lock all related secure/privileged bits using the correct bits in GTZC1_MPCBB_CFGLOCK. This lock remains active until the next system reset.

The block size is 512 bytes. The superblock size is \( 512 \times 32 = 16 \) Kbytes.

5.4.5 TrustZone illegal access controller (TZIC)

The TZIC concentrates all illegal access source events into one place. It is used only when the system is TrustZone enabled (TZEN = 1).

TZIC allows the trace (flag) of which event triggered the secure illegal access interrupt. Register masks (GTZC1_TZIC_IERx) are available to filter an unwanted event. On an unmasked illegal event, TZIC generates the GTZC1_IRQn interrupt to the NVIC.

For each illegal event source, a status flag and a clear bit exist (respectively within GTZC1_TZIC_SRx and GTZC1_TZIC_FCRx). The reset value of mask registers (GTZC1_TZIC_IERx) is such that all events are masked.

5.4.6 Power-on/reset state

The power-on and reset state of the TZSC clear to 0 all bits of GTZC1_TZSC_SECCFGRn and GTZC1_TZSC_PRIVCFGRn. It means that all securable peripherals are, respectively, set to nonsecure and unprivileged.

For internal SRAMs, all GTZC1_MPCBB_SECCFGRn and GTZC1_MPCBB_PRIVCFGRn are set:

• • To 0xFFFF FFFF, making these internal memories block secure and privileged by default when TrustZone security is enabled at system level (TZEN = 1).
• • To 0x0000 0000, making these internal memories block nonsecure and unprivileged by default when TrustZone security is disabled at system level (TZEN = 0).

A secure boot code can then program the security settings. This code makes the components secure or not according to the requirements.

5.5 GTZC interrupts

TZIC is a secure peripheral, which systematically generates an illegal access event when accessed by a nonsecure access. The MPCBB and TZSC are TrustZone-aware peripherals. The consequence is that secure and nonsecure registers coexist within the peripheral.

Table 28. GTZC interrupt request

5.6 GTZC1 TZSC registers

All registers are accessed only by words (32-bit).

5.6.1 GTZC1 TZSC control register (GTZC1_TZSC_CR)

Address offset: 0x000

Reset value: 0x0000 0000

Secure privileged access only.

Bits 31:1 Reserved, must be kept at reset value.

Bit 0 LCK : Lock the configuration of GTZC1_TZSC_SECCFGRn and GTZC1_TZSC_PRIVCFGRn registers until next reset

This bit is cleared by default and once set, it can not be reset until system reset.

0: Configuration of all GTZC1_TZSC_SECCFGRn and GTZC1_TZSC_PRIVCFGRn registers not locked

1: Configuration of all GTZC1_TZSC_SECCFGRn and GTZC1_TZSC_PRIVCFGRn registers locked

5.6.2 GTZC1 TZSC secure configuration register 1 (GTZC1_TZSC_SECCFGR1)

Address offset: 0x010

Reset value: 0x0000 0000

Write-secure access only.

This register can be written only by a secure privileged transaction when the corresponding GTZC1_TZSC_PRIVCFGR1 register bit is set to 1. If a given PRIV bit is not set, the equivalent SEC bit can be written by an unprivileged secure transaction.

Read accesses are authorized for any type of transactions, secure or not, privileged or not.

Bits 31:18 Reserved, must be kept at reset value.

Bit 17 LPTIM2SEC : Secure access mode for LPTIM2

0: Nonsecure

1: Secure

Bit 16 I2C4SEC : Secure access mode for I2C4

0: Nonsecure

1: Secure

Note: This bit is reserved on STM32WBA63xx devices.

Bit 15 Reserved, must be kept at reset value.

Bit 14 I2C2SEC : Secure access mode for I2C2

0: Nonsecure

1: Secure

Note: This bit is reserved on STM32WBA63xx devices.

Bit 13 I2C1SEC : Secure access mode for I2C1

0: Nonsecure

1: Secure

Bits 12:11 Reserved, must be kept at reset value.

Bit 10 USART3SEC : Secure access mode for USART3

0: Nonsecure

1: Secure

Note: This bit is reserved on STM32WBA63xx devices.

Bit 9 USART2SEC : Secure access mode for USART2

0: Nonsecure

1: Secure

Bit 8 SPI2SEC : Secure access mode for SPI2

0: Nonsecure

1: Secure

Note: This bit is reserved on STM32WBA63xx devices.

Bit 7 IWDGSEC : Secure access mode for IWDG

0: Nonsecure

1: Secure

Bit 6 WWDGSEC : Secure access mode for WWDG

0: Nonsecure

1: Secure

Bits 5:3 Reserved, must be kept at reset value.

Bit 2 TIM4SEC : Secure access mode for TIM4

0: Nonsecure

1: Secure

Note: This bit is reserved on STM32WBA63xx devices.

Bit 1 TIM3SEC : Secure access mode for TIM3

0: Nonsecure

1: Secure

Bit 0 TIM2SEC : Secure access mode for TIM2

0: Nonsecure

1: Secure

5.6.3 GTZC1 TZSC secure configuration register 2 (GTZC1_TZSC_SECCFGR2)

Address offset: 0x014

Reset value: 0x0000 0000

Write-secure access only.

This register can be written only by a secure privileged transaction when the corresponding GTZC1_TZSC_PRIVCFGR2 register bit is set to 1. If a given PRIV bit is not set, the equivalent SEC bit can be written by a secure unprivileged transaction.

Read accesses are authorized for any type of transactions, secure or not, privileged or not.

Bits 31:26 Reserved, must be kept at reset value.

Bit 25 VREFBUFSEC : Secure access mode for VREFBUF

0: Nonsecure

1: Secure

Note: This bit is reserved on STM32WBA63/64xx devices.

Bit 24 ADC4SEC : Secure access mode for ADC4

0: Nonsecure

1: Secure

Bit 23 COMPSEC : Secure access mode for COMP

0: Nonsecure

1: Secure

Bits 22:20 Reserved, must be kept at reset value.

Bit 19 LPTIM1SEC : Secure access mode for LPTIM1

0: Nonsecure

1: Secure

Bit 18 I2C3SEC : Secure access mode for I2C3

0: Nonsecure

1: Secure

Bit 17 LPUART1SEC : Secure access mode for LPUART1

0: Nonsecure

1: Secure

Bit 16 SPI3SEC : Secure access mode for SPI3

0: Nonsecure

1: Secure

Bits 15:8 Reserved, must be kept at reset value.

Bit 7 SAI1SEC : Secure access mode for SAI1

0: Nonsecure

1: Secure

Bit 6 TIM17SEC : Secure access mode for TIM17

0: Nonsecure

1: Secure

Bit 5 TIM16SEC : Secure access mode for TIM16

0: Nonsecure

1: Secure

Bit 4 Reserved, must be kept at reset value.

Bit 3 USART1SEC : Secure access mode for USART1

0: Nonsecure

1: Secure

Bit 2 Reserved, must be kept at reset value.

Bit 1 SPI1SEC : Secure access mode for SPI1

0: Nonsecure

1: Secure

Bit 0 TIM1SEC : Secure access mode for TIM1

0: Nonsecure

1: Secure

5.6.4 GTZC1 TZSC secure configuration register 3 (GTZC1_TZSC_SECCFGR3)

Address offset: 0x018

Reset value: 0x0000 0000

Write-secure access only.

This register can be written only by a secure privileged transaction when the corresponding GTZC1_TZSC_PRIVCFGR3 register bit is set to 1. If a given PRIV is not set, the equivalent SEC bit can be written by a secure unprivileged transaction.

Read accesses are authorized for any type of transactions, secure or not, privileged or not.

Bits 31:25 Reserved, must be kept at reset value.

Bit 24 PTACONVSEC : Secure access mode for PTACONV

0: Nonsecure

1: Secure

Bit 23 RADIOSEC : Secure access mode for 2.4 GHz RADIO

0: Nonsecure

1: Secure

Bit 22 RAMCFGSEC : Secure access mode for RAMCFG

0: Nonsecure

1: Secure

Bits 21:17 Reserved, must be kept at reset value.

Bit 16 PKASEC : Secure access mode for PKA

0: Nonsecure

1: Secure

Bit 15 Reserved, must be kept at reset value.

Bit 14 SAESSEC : Secure access mode for SAES

0: Nonsecure

1: Secure

Bit 13 RNGSEC : Secure access mode for RNG

0: Nonsecure

1: Secure

Bit 12 HASHSEC : Secure access mode for HASH

0: Nonsecure

1: Secure

Bit 11 AESSEC : Secure access mode for AES

0: Nonsecure

1: Secure

Bit 10 OTGSEC : Secure access mode for USB OTG_HS

0: Nonsecure

1: Secure

Note: This bit is reserved on STM32WBA63xx devices.

Bits 9:7 Reserved, must be kept at reset value.

Bit 6 ICACHE_REGSEC : Secure access mode for ICACHE registers

0: Nonsecure

1: Secure

Bit 5 Reserved, must be kept at reset value.

Bit 4 TSCSEC : Secure access mode for TSC

0: Nonsecure

1: Secure

Bit 3 CRCSEC : Secure access mode for CRC

0: Nonsecure

1: Secure

Bits 2:0 Reserved, must be kept at reset value.

5.6.5 GTZC1 TZSC privilege configuration register 1 (GTZC1_TZSC_PRIVCFGR1)

Address offset: 0x020

Reset value: 0x0000 0000

Write-secure access only.

This register can be written only by a secure privileged transaction when the corresponding GTZC1_TZSC_PRIVCFGR3 register bit is set to 1. If a given PRIV is not set, the equivalent SEC bit can be written by a secure unprivileged transaction.

Read accesses are authorized for any type of transactions, secure or not, privileged or not.

Bits 31:18 Reserved, must be kept at reset value.

Bit 17 LPTIM2PRIV : Privileged access mode for LPTIM2

0: Unprivileged

1: Privileged

Bit 16 I2C4PRIV : Privileged access mode for I2C4

0: Unprivileged

1: Privileged

Note: This bit is reserved on STM32WBA63xx devices.

Bit 15 Reserved, must be kept at reset value.

Bit 14 I2C2PRIV : Privileged access mode for I2C2

0: Unprivileged

1: Privileged

Note: This bit is reserved on STM32WBA63xx devices.

Bit 13 I2C1PRIV : Privileged access mode for I2C1

0: Unprivileged

1: Privileged

Bits 12:11 Reserved, must be kept at reset value.

Bit 10 USART3PRIV : Privileged access mode for USART3

0: Unprivileged

1: Privileged

Note: This bit is reserved on STM32WBA63xx devices.

Bit 9 USART2PRIV : Privileged access mode for USART2

0: Unprivileged

1: Privileged

Bit 8 SPI2PRIV : Privileged access mode for SPI2

0: Unprivileged

1: Privileged

Note: This bit is reserved on STM32WBA63xx devices.

Bit 7 IWDGPRIV : Privileged access mode for IWDG

0: Unprivileged

1: Privileged

Bit 6 WWDGPRIV : Privileged access mode for WWDG

0: Unprivileged

1: Privileged

Bits 5:3 Reserved, must be kept at reset value.

Bit 2 TIM4PRIV : Privileged access mode for TIM4

0: Unprivileged

1: Privileged

Note: This bit is reserved on STM32WBA63xx devices.

Bit 1 TIM3PRIV : Privileged access mode for TIM3

0: Unprivileged

1: Privileged

Bit 0 TIM2PRIV : Privileged access mode for TIM2

0: Unprivileged

1: Privileged

5.6.6 GTZC1 TZSC privilege configuration register 2 (GTZC1_TZSC_PRIVCFGR2)

Address offset: 0x024

Reset value: 0x0000 0000

Write-privileged access only.

This register can be written only by a secure privileged transaction when the corresponding GTZC1_TZSC_SECCFGR2 register bit is set to 1. If a given SEC bit is not set, the equivalent PRIV bit can be written by a nonsecure privileged transaction.

Read accesses are authorized for any type of transactions, secure or not, privileged or not.

Bits 31:26 Reserved, must be kept at reset value.

Bit 25 VREFBUFPRIV : Privileged access mode for VREFBUF

0: Unprivileged

1: Privileged

Note: This bit is reserved on STM32WBA63/64xx devices.

Bit 24 ADC4PRIV : Privileged access mode for ADC4

0: Unprivileged

1: Privileged

Bit 23 COMPPRIV : Privileged access mode for COMP

0: Unprivileged

1: Privileged

Bits 22:20 Reserved, must be kept at reset value.

Bit 19 LPTIM1PRIV : Privileged access mode for LPTIM1

0: Unprivileged

1: Privileged

Bit 18 I2C3PRIV : Privileged access mode for I2C3

0: Unprivileged

1: Privileged

Bit 17 LPUART1PRIV : Privileged access mode for LPUART1

0: Unprivileged

1: Privileged

Bit 16 SPI3PRIV : Privileged access mode for SPI3

0: Unprivileged

1: Privileged

Bits 15:8 Reserved, must be kept at reset value.

Bit 7 SAI1PRIV : Privileged access mode for SAI1

0: Unprivileged

1: Privileged

Bit 6 TIM17PRIV : Privileged access mode for TIM17

0: Unprivileged

1: Privileged

Bit 5 TIM16PRIV : Privileged access mode for TIM16

0: Unprivileged

1: Privileged

Bit 4 Reserved, must be kept at reset value.

Bit 3 USART1PRIV : Privileged access mode for USART1

0: Unprivileged

1: Privileged

Bit 2 Reserved, must be kept at reset value.

Bit 1 SPI1PRIV : Privileged access mode for SPI1PRIV

0: Unprivileged

1: Privileged

Bit 0 TIM1PRIV : Privileged access mode for TIM1

0: Unprivileged

1: Privileged

5.6.7 GTZC1 TZSC privilege configuration register 3 (GTZC1_TZSC_PRIVCFGR3)

Address offset: 0x028

Reset value: 0x0000 0000

Write-privileged access only.

This register can be written only by a secure privileged transaction when the corresponding GTZC1_TZSC_SECCFGR3 register bit is set to 1. If a given SEC bit is not set, the equivalent PRIV bit can be written by a nonsecure privileged transaction. Read accesses are authorized for any type of transactions, either secure or not, or privileged or not.

Bits 31:25 Reserved, must be kept at reset value.

Bit 24 PTACONVPRIV : Privileged access mode for PTACONV

0: Unprivileged

1: Privileged

Bit 23 RADIOPRIV : Privileged access mode for 2.4 GHz RADIO

0: Unprivileged

1: Privileged

Bit 22 RAMCFGPRIV : Privileged access mode for RAMCFG

0: Unprivileged

1: Privileged

Bits 21:17 Reserved, must be kept at reset value.

Bit 16 PKAPRIV : Privileged access mode for PKA

0: Unprivileged

1: Privileged

Bit 15 Reserved, must be kept at reset value.

Bit 14 SAESPRIV : Privileged access mode for SAES

0: Unprivileged

1: Privileged

Bit 13 RNGPRIV : Privileged access mode for RNG

0: Unprivileged

1: Privileged

Bit 12 HASHPRIV : Privileged access mode for HASH

0: Unprivileged

1: Privileged

Bit 11 AESPRIV : Privileged access mode for AES

0: Unprivileged

1: Privileged

Bit 10 OTGPRIV : Privileged access mode for USB OTG_HS

0: Unprivileged

1: Privileged

Note: This bit is reserved on STM32WBA63xx devices.

Bits 9:7 Reserved, must be kept at reset value.

Bit 6 ICACHE_REGPRIV : Privileged access mode for ICACHE registers

0: Unprivileged

1: Privileged

Bit 5 Reserved, must be kept at reset value.

Bit 4 TSCPRIV : Privileged access mode for TSC

0: Unprivileged

1: Privileged

Bit 3 CRCPRIV : Privileged access mode for CRC

0: Unprivileged

1: Privileged

Bits 2:0 Reserved, must be kept at reset value.

5.6.8 GTZC1 TZSC register map

Table 29. GTZC1 TZSC register map and reset values

1. Bit only available on STM32WBA62/64/65xx devices

2. Bit only available on STM32WBA62/65xx devices

5.7 GTZC1 TZIC registers

All registers are accessed only by words (32-bit).

5.7.1 GTZC1 TZIC interrupt enable register 1 (GTZC1_TZIC_IER1)

Address offset: 0x000

Reset value: 0x0000 0000

Secure privileged access only.

This register is used to enable interrupts for illegal access.

Bits 31:18 Reserved, must be kept at reset value.

Bit 17 LPTIM2IE : Illegal access interrupt enable for LPTIM2

0: Interrupt disabled

1: Interrupt enabled

Bit 16 I2C4IE : Illegal access interrupt enable for I2C4

0: Interrupt disabled

1: Interrupt enabled

Note: This bit is reserved on STM32WBA63xx devices.

Bit 15 Reserved, must be kept at reset value.

Bit 14 I2C2IE : Illegal access interrupt enable for I2C2

0: Interrupt disabled

1: Interrupt enabled

Note: This bit is reserved on STM32WBA63xx devices.

Bit 13 I2C1IE : Illegal access interrupt enable for I2C1

0: Interrupt disabled

1: Interrupt enabled

Bits 12:11 Reserved, must be kept at reset value.

Bit 10 USART3IE : Illegal access interrupt enable for USART3

0: Interrupt disabled

1: Interrupt enabled

Note: This bit is reserved on STM32WBA63xx devices.

Bit 9 USART2IE : Illegal access interrupt enable for USART2

0: Interrupt disabled

1: Interrupt enabled

Bit 8 SPI2IE : Illegal access interrupt enable for SPI2

0: Interrupt disabled

1: Interrupt enabled

Note: This bit is reserved on STM32WBA63xx devices.

Bit 7 IWDGIE : Illegal access interrupt enable for IWDG

0: Interrupt disabled

1: Interrupt enabled

Bit 6 WWDGIE : Illegal access interrupt enable for WWDG

0: Interrupt disabled

1: Interrupt enabled

Bits 5:3 Reserved, must be kept at reset value.

Bit 2 TIM4IE : Illegal access interrupt enable for TIM4

0: Interrupt disabled

1: Interrupt enabled

Note: This bit is reserved on STM32WBA63xx devices.

Bit 1 TIM3IE : Illegal access interrupt enable for TIM3

0: Interrupt disabled

1: Interrupt enabled

Bit 0 TIM2IE : Illegal access interrupt enable for TIM2

0: Interrupt disabled

1: Interrupt enabled

5.7.2 GTZC1 TZIC interrupt enable register 2 (GTZC1_TZIC_IER2)

Address offset: 0x004

Reset value: 0x0000 0000

Secure privileged access only.

This register is used to enable interrupts for illegal access.

Bits 31:26 Reserved, must be kept at reset value.

Bit 25 VREFBUFIE : Illegal access interrupt enable for VREFBUF

0: Interrupt disabled

1: Interrupt enabled

Note: This bit is reserved on STM32WBA63/64xx devices.

1. Bit 24 ADC4IE : Illegal access interrupt enable for ADC4
   0: Interrupt disabled
   1: Interrupt enabled
2. Bit 23 COMPIE : Illegal access interrupt enable for COMP
   0: Interrupt disabled
   1: Interrupt enabled
3. Bits 22:20 Reserved, must be kept at reset value.
4. Bit 19 LPTIM1IE : Illegal access interrupt enable for LPTIM1
   0: Interrupt disabled
   1: Interrupt enabled
5. Bit 18 I2C3IE : Illegal access interrupt enable for I2C3
   0: Interrupt disabled
   1: Interrupt enabled
6. Bit 17 LPUART1IE : Illegal access interrupt enable for LPUART1
   0: Interrupt disabled
   1: Interrupt enabled
7. Bit 16 SPI3IE : Illegal access interrupt enable for SPI3
   0: Interrupt disabled
   1: Interrupt enabled
8. Bits 15:8 Reserved, must be kept at reset value.
9. Bit 7 SAI1IE : Illegal access interrupt enable for SAI1
   0: Interrupt disabled
   1: Interrupt enabled
10. Bit 6 TIM17IE : Illegal access interrupt enable for TIM17
    0: Interrupt disabled
    1: Interrupt enabled
11. Bit 5 TIM16IE : Illegal access interrupt enable for TIM16
    0: Interrupt disabled
    1: Interrupt enabled
12. Bit 4 Reserved, must be kept at reset value.
13. Bit 3 USART1IE : Illegal access interrupt enable for USART1
    0: Interrupt disabled
    1: Interrupt enabled
14. Bit 2 Reserved, must be kept at reset value.
15. Bit 1 SPI1IE : Illegal access interrupt enable for SPI1
    0: Interrupt disabled
    1: Interrupt enabled
16. Bit 0 TIM1IE : Illegal access interrupt enable for TIM1
    0: Interrupt disabled
    1: Interrupt enabled

5.7.3 GTZC1 TZIC interrupt enable register 3 (GTZC1_TZIC_IER3)

Address offset: 0x008

Reset value: 0x0000 0000

Secure privileged access only.

This register is used to enable interrupts for illegal access.

Bits 31:25 Reserved, must be kept at reset value.

Bit 24 PTACONVIE : Illegal access interrupt enable for PTACONV

0: Interrupt disabled

1: Interrupt enabled

Bit 23 RADIOIE : Illegal access interrupt enable for 2.4 GHz RADIO

0: Interrupt disabled

1: Interrupt enabled

Bit 22 RAMCFGIE : Illegal access interrupt enable for RAMCFG

0: Interrupt disabled

1: Interrupt enabled

Bits 21:17 Reserved, must be kept at reset value.

Bit 16 PKAIE : Illegal access interrupt enable for PKA

0: Interrupt disabled

1: Interrupt enabled

Bit 15 HSEMIE : Illegal access interrupt enable for HSEM

0: Interrupt disabled

1: Interrupt enabled

Bit 14 SAESIE : Illegal access interrupt enable for SAES

0: Interrupt disabled

1: Interrupt enabled

Bit 13 RNGIE : Illegal access interrupt enable for RNG

0: Interrupt disabled

1: Interrupt enabled

Bit 12 HASHIE : Illegal access interrupt enable for HASH

0: Interrupt disabled

1: Interrupt enabled

Bit 11 AESIE : Illegal access interrupt enable for AES

0: Interrupt disabled

1: Interrupt enabled

Bit 10 OTGIE : Illegal access interrupt enable for USB OTG_HS

0: Interrupt disabled

1: Interrupt enabled

Note: This bit is reserved on STM32WBA63xx devices.

Bits 9:7 Reserved, must be kept at reset value.

Bit 6 ICACHE_REGIE : Illegal access interrupt enable for ICACHE registers

0: Interrupt disabled

1: Interrupt enabled

Bit 5 Reserved, must be kept at reset value.

Bit 4 TSCIE : Illegal access interrupt enable for TSC

0: Interrupt disabled

1: Interrupt enabled

Bit 3 CRCIE : Illegal access interrupt enable for CRC

0: Interrupt disabled

1: Interrupt enabled

Bits 2:0 Reserved, must be kept at reset value.

5.7.4 GTZC1 TZIC interrupt enable register 4 (GTZC1_TZIC_IER4)

Address offset: 0x00C

Reset value: 0x0000 0000

Secure privileged access only.

This register is used to enable interrupts for illegal access.

Bit 31 MPCBB6IE : Illegal access interrupt enable for MPCBB6

0: Interrupt disabled

1: Interrupt enabled

Bit 30 SRAM6IE : Illegal access interrupt enable for 2.4 GHz RXTXRAM memory

0: Interrupt disabled

1: Interrupt enabled

1. Bits 29:26 Reserved, must be kept at reset value.
2. Bit 25 MPCBB2IE : Illegal access interrupt enable for MPCBB2
   0: Interrupt disabled
   1: Interrupt enabled
3. Bit 24 SRAM2IE : Illegal access interrupt enable for SRAM2 memory
   0: Interrupt disabled
   1: Interrupt enabled
4. Bit 23 MPCBB1IE : Illegal access interrupt enable for MPCBB1
   0: Interrupt disabled
   1: Interrupt enabled
5. Bit 22 SRAM1IE : Illegal access interrupt enable for SRAM1
   0: Interrupt disabled
   1: Interrupt enabled
6. Bits 21:16 Reserved, must be kept at reset value.
7. Bit 15 TZICIE : Illegal access interrupt enable for GTZC1 TZIC
   0: Interrupt disabled
   1: Interrupt enabled
8. Bit 14 TZSCIE : Illegal access interrupt enable for GTZC1 TZSC
   0: Interrupt disabled
   1: Interrupt enabled
9. Bit 13 EXTIIE : Illegal access interrupt enable for EXTI
   0: Interrupt disabled
   1: Interrupt enabled
10. Bit 12 Reserved, must be kept at reset value.
11. Bit 11 RCCIE : Illegal access interrupt enable for RCC
    0: Interrupt disabled
    1: Interrupt enabled
12. Bit 10 PWRIE : Illegal access interrupt enable for PWR
    0: Interrupt disabled
    1: Interrupt enabled
13. Bit 9 TAMPIE : Illegal access interrupt enable for TAMP
    0: Interrupt disabled
    1: Interrupt enabled
14. Bit 8 RTCIE : Illegal access interrupt enable for RTC
    0: Interrupt disabled
    1: Interrupt enabled
15. Bit 7 SYSCFGIE : Illegal access interrupt enable for SYSCFG
    0: Interrupt disabled
    1: Interrupt enabled
16. Bits 6:3 Reserved, must be kept at reset value.
17. Bit 2 FLASH_REGIE : Illegal access interrupt enable for FLASH interface
    0: Interrupt disabled
    1: Interrupt enabled

Bit 1 FLASHIE : Illegal access interrupt enable for FLASH memory

0: Interrupt disabled

1: Interrupt enabled

Bit 0 GPDMA1IE : Illegal access interrupt enable for GPDMA1

0: Interrupt disabled

1: Interrupt enabled

5.7.5 GTZC1 TZIC status register 1 (GTZC1_TZIC_SR1)

Address offset: 0x010

Reset value: 0x0000 0000

Secure privileged access only.

Bits 31:18 Reserved, must be kept at reset value.

Bit 17 LPTIM2F : Illegal access flag for LPTIM2

0: No illegal access event

1: Illegal access event

Bit 16 I2C4F : Illegal access flag for I2C4

0: No illegal access event

1: Illegal access event

Note: This bit is reserved on STM32WBA63xx devices.

Bit 15 Reserved, must be kept at reset value.

Bit 14 I2C2F : Illegal access flag for I2C2

0: No illegal access event

1: Illegal access event

Note: This bit is reserved on STM32WBA63xx devices.

Bit 13 I2C1F : Illegal access flag for I2C1

0: No illegal access event

1: Illegal access event

Bits 12:11 Reserved, must be kept at reset value.

Bit 10 USART3F : Illegal access flag for USART3

0: No illegal access event

1: Illegal access event

Note: This bit is reserved on STM32WBA63xx devices.

Bit 9 USART2F : Illegal access flag for USART2

0: No illegal access event

1: Illegal access event

Bit 8 SPI2F : Illegal access flag for SPI2

0: No illegal access event

1: Illegal access event

Note: This bit is reserved on STM32WBA63xx devices.

Bit 7 IWDGF : Illegal access flag for IWDG

0: No illegal access event

1: Illegal access event

Bit 6 WWDGF : Illegal access flag for WWDG

0: No illegal access event

1: Illegal access event

Bits 5:3 Reserved, must be kept at reset value.

Bit 2 TIM4F : Illegal access flag for TIM4

0: No illegal access event

1: Illegal access event

Note: This bit is reserved on STM32WBA63xx devices.

Bit 1 TIM3F : Illegal access flag for TIM3

0: No illegal access event

1: Illegal access event

Bit 0 TIM2F : Illegal access flag for TIM2

0: No illegal access event

1: Illegal access event

5.7.6 GTZC1 TZIC status register 2 (GTZC1_TZIC_SR2)

Address offset: 0x014

Reset value: 0x0000 0000

Secure privileged access only.

Bits 31:26 Reserved, must be kept at reset value.

Bit 25 VREFBUF : Illegal access flag for VREFBUF

0: No illegal access event

1: Illegal access event

Note: This bit is reserved on STM32WBA63/64xx devices.

Bit 24 ADC4F : Illegal access flag for ADC4

0: No illegal access event

1: Illegal access event

Bit 23 COMP : Illegal access flag for COMP

0: No illegal access event

1: Illegal access event

Bits 22:20 Reserved, must be kept at reset value.

Bit 19 LPTIM1F : Illegal access flag for LPTIM1

0: No illegal access event

1: Illegal access event

Bit 18 I2C3F : Illegal access flag for I2C3

0: No illegal access event

1: Illegal access event

Bit 17 LPUART1F : Illegal access flag for LPUART1

0: No illegal access event

1: Illegal access event

Bit 16 SPI3F : Illegal access flag for SPI3

0: No illegal access event

1: Illegal access event

Bits 15:8 Reserved, must be kept at reset value.

Bit 7 SAI1F : Illegal access flag for SAI1

0: No illegal access event

1: Illegal access event

Bit 6 TIM17F : Illegal access flag for TIM17

0: No illegal access event

1: Illegal access event

Bit 5 TIM16F : Illegal access flag for TIM16

0: No illegal access event

1: Illegal access event

Bit 4 Reserved, must be kept at reset value.

Bit 3 USART1F : Illegal access flag for USART1

0: No illegal access event

1: Illegal access event

Bit 2 Reserved, must be kept at reset value.

Bit 1 SPI1F : Illegal access flag for SPI1

0: No illegal access event

1: Illegal access event

Bit 0 TIM1F : Illegal access flag for TIM1

0: No illegal access event

1: Illegal access event

5.7.7 GTZC1 TZIC status register 3 (GTZC1_TZIC_SR3)

Address offset: 0x018

Reset value: 0x0000 0000

Secure privileged access only.

Bits 31:25 Reserved, must be kept at reset value.

Bit 24 PTACONVF : Illegal access flag for PTACONV

0: No illegal access event

1: Illegal access event

Bit 23 RADIOF : Illegal access flag for 2.4 GHz RADIO

0: No illegal access event

1: Illegal access event

Bit 22 RAMCFGF : Illegal access flag for RAMCFG

0: No illegal access event

1: Illegal access event

Bits 21:17 Reserved, must be kept at reset value.

Bit 16 PKAF : Illegal access flag for PKA

0: No illegal access event

1: Illegal access event

Bit 15 HSEMF : Illegal access flag for HSEM

0: No illegal access event

1: Illegal access event

Bit 14 SAESF : Illegal access flag for SAES

0: No illegal access event

1: Illegal access event

Bit 13 RNGF : Illegal access flag for RNG

0: No illegal access event

1: Illegal access event

Bit 12 HASHF : Illegal access flag for HASH

0: No illegal access event

1: Illegal access event

Bit 11 AESF : Illegal access flag for AES

0: No illegal access event

1: Illegal access event

Bit 10 OTGF : Illegal access flag for USB OTG_HS

0: No illegal access event

1: Illegal access event

Note: This bit is reserved on STM32WBA63xx devices.

Bits 9:7 Reserved, must be kept at reset value.

Bit 6 ICACHE_REGF : Illegal access flag for ICACHE registers

0: No illegal access event

1: Illegal access event

Bit 5 Reserved, must be kept at reset value.

Bit 4 TSCF : Illegal access flag for TSC

0: No illegal access event

1: Illegal access event

Bit 3 CRCF : Illegal access flag for CRC

0: No illegal access event

1: Illegal access event

Bits 2:0 Reserved, must be kept at reset value.

5.7.8 GTZC1 TZIC status register 4 (GTZC1_TZIC_SR4)

Address offset: 0x01C

Reset value: 0x0000 0000

Secure privileged access only.

Bit 31 MPCBB6F : Illegal access flag for MPCBB6

0: No illegal access event

1: Illegal access event

Bit 30 SRAM6F : Illegal access flag for 2.4 GHZ RADIO RXTXRAM memory

0: No illegal access event

1: Illegal access event

Bits 29:26 Reserved, must be kept at reset value.

1. Bit 25 MPCBB2F : Illegal access flag for MPCBB2
   0: No illegal access event
   1: Illegal access event
2. Bit 24 SRAM2F : Illegal access flag for SRAM2 memory
   0: No illegal access event
   1: Illegal access event
3. Bit 23 MPCBB1F : Illegal access flag for MPCBB1
   0: No illegal access event
   1: Illegal access event
4. Bit 22 SRAM1F : Illegal access flag for SRAM1
   0: No illegal access event
   1: Illegal access event
5. Bits 21:16 Reserved, must be kept at reset value.
6. Bit 15 TZICF : Illegal access flag for GTZC1 TZIC
   0: No illegal access event
   1: Illegal access event
7. Bit 14 TZSCF : Illegal access flag for GTZC1 TZSC
   0: No illegal access event
   1: Illegal access event
8. Bit 13 EXTIF : Illegal access flag for EXTI
   0: No illegal access event
   1: Illegal access event
9. Bit 12 Reserved, must be kept at reset value.
10. Bit 11 RCCF : Illegal access flag for RCC
    0: No illegal access event
    1: Illegal access event
11. Bit 10 PWRF : Illegal access flag for PWR
    0: No illegal access event
    1: Illegal access event
12. Bit 9 TAMPF : Illegal access flag for TAMP
    0: No illegal access event
    1: Illegal access event
13. Bit 8 RTCF : Illegal access flag for RTC
    0: No illegal access event
    1: Illegal access event
14. Bit 7 SYSCFGF : Illegal access flag for SYSCFG
    0: No illegal access event
    1: Illegal access event
15. Bits 6:3 Reserved, must be kept at reset value.
16. Bit 2 FLASH_REGF : Illegal access flag for FLASH interface
    0: No illegal access event
    1: Illegal access event

Bit 1 FLASHF : Illegal access flag for FLASH memory

0: No illegal access event

1: Illegal access event

Bit 0 GPDMA1F : Illegal access flag for GPDMA1

0: No illegal access event

1: Illegal access event

5.7.9 GTZC1 TZIC flag clear register 1 (GTZC1_TZIC_FCR1)

Address offset: 0x020

Reset value: 0x0000 0000

Secure privileged access only.

Bits 31:18 Reserved, must be kept at reset value.

Bit 17 CLPTIM2F : Clear the illegal access flag for LPTIM2

0: No action

1: Status flag cleared

Bit 16 CI2C4F : Clear the illegal access flag for I2C4

0: No action

1: Status flag cleared

Note: This bit is reserved on STM32WBA63xx devices.

Bit 15 Reserved, must be kept at reset value.

Bit 14 CI2C2F : Clear the illegal access flag for I2C2

0: No action

1: Status flag cleared

Note: This bit is reserved on STM32WBA63xx devices.

Bit 13 CI2C1F : Clear the illegal access flag for I2C1

0: No action

1: Status flag cleared

Bits 12:11 Reserved, must be kept at reset value.

Bit 10 CUSART3F : Clear the illegal access flag for USART3

0: No action

1: Status flag cleared

Note: This bit is reserved on STM32WBA63xx devices.

Bit 9 CUSART2F : Clear the illegal access flag for USART2

0: No action

1: Status flag cleared

Bit 8 CSPI2F : Clear the illegal access flag for SPI2

0: No action

1: Status flag cleared

Note: This bit is reserved on STM32WBA63xx devices.

Bit 7 CIWDGF : Clear the illegal access flag for IWDG

0: No action

1: Status flag cleared

Bit 6 CWWDGF : Clear the illegal access flag for WWDG

0: No action

1: Status flag cleared

Bits 5:3 Reserved, must be kept at reset value.

Bit 2 CTIM4F : Clear the illegal access flag for TIM4

0: No action

1: Status flag cleared

Note: This bit is reserved on STM32WBA63xx devices.

Bit 1 CTIM3F : Clear the illegal access flag for TIM3

0: No action

1: Status flag cleared

Bit 0 CTIM2F : Clear the illegal access flag for TIM2

0: No action

1: Status flag cleared

5.7.10 GTZC1 TZIC flag clear register 2 (GTZC1_TZIC_FCR2)

Address offset: 0x024

Reset value: 0x0000 0000

Secure privileged access only.

Bits 31:26 Reserved, must be kept at reset value.

Bit 25 CVREFBUF : Clear the illegal access flag for VREFBUF

0: No action

1: Status flag cleared

Note: This bit is reserved on STM32WBA63/64xx devices.

Bit 24 CADC4F : Clear the illegal access flag for ADC4

0: No action

1: Status flag cleared

Bit 23 CCOMPF : Clear the illegal access flag for COMP

0: No action

1: Status flag cleared

Bits 22:20 Reserved, must be kept at reset value.

Bit 19 CLPTIM1F : Clear the illegal access flag for LPTIM1

0: No action

1: Status flag cleared

Bit 18 CI2C3F : Clear the illegal access flag for I2C3

0: No action

1: Status flag cleared

Bit 17 CLPUART1F : Clear the illegal access flag for LPUART1

0: No action

1: Status flag cleared

Bit 16 CSPI3F : Clear the illegal access flag for SPI3

0: No action

1: Status flag cleared

Bits 15:8 Reserved, must be kept at reset value.

Bit 7 CSAI1F : Clear the illegal access flag for SAI1

0: No action

1: Status flag cleared

Bit 6 CTIM17F : Clear the illegal access flag for TIM17

0: No action

1: Status flag cleared

Bit 5 CTIM16F : Clear the illegal access flag for TIM16

0: No action

1: Status flag cleared

Bit 4 Reserved, must be kept at reset value.

Bit 3 CUSART1F : Clear the illegal access flag for USART1

0: No action

1: Status flag cleared

Bit 2 Reserved, must be kept at reset value.

Bit 1 CSPI1F : Clear the illegal access flag for SPI1

0: No action

1: Status flag cleared

Bit 0 CTIM1F : Clear the illegal access flag for TIM1

0: No action

1: Status flag cleared

5.7.11 GTZC1 TZIC flag clear register 3 (GTZC1_TZIC_FCR3)

Address offset: 0x028

Reset value: 0x0000 0000

Secure privileged access only.

Bits 31:25 Reserved, must be kept at reset value.

Bit 24 CPTACONVF : Clear the illegal access flag for PTACONV

0: No action

1: Status flag cleared

Bit 23 CRADIOF : Clear the illegal access flag for 2.4 GHz RADIO

0: No action

1: Status flag cleared

Bit 22 CRAMCFGF : Clear the illegal access flag for RAMCFG

0: No action

1: Status flag cleared

Bits 21:17 Reserved, must be kept at reset value.

Bit 16 CPKAF : Clear the illegal access flag for PKA

0: No action

1: Status flag cleared

Bit 15 CHSEMF : Clear the illegal access flag for HSEM

0: No action

1: Status flag cleared

Bit 14 CSAESF : Clear the illegal access flag for SAES

0: No action

1: Status flag cleared

Bit 13 CRNGF : Clear the illegal access flag for RNG

0: No action

1: Status flag cleared

Bit 12 CHASHF : Clear the illegal access flag for HASH

0: No action

1: Status flag cleared

Bit 11 CAESF : Clear the illegal access flag for AES

0: No action

1: Status flag cleared

Bit 10 COTGF : Clear the illegal access flag for USB OTG_HS

0: No action

1: Status flag cleared

Note: This bit is reserved on STM32WBA63xx devices.

Bits 9:7 Reserved, must be kept at reset value.

Bit 6 CICACHE_REGF : Clear the illegal access flag for ICACHE registers

0: No action

1: Status flag cleared

Bit 5 Reserved, must be kept at reset value.

Bit 4 CTSCF : Clear the illegal access flag for TSC

0: No action

1: Status flag cleared

Bit 3 CCRCF : Clear the illegal access flag for CRC

0: No action

1: Status flag cleared

Bits 2:0 Reserved, must be kept at reset value.

5.7.12 GTZC1 TZIC flag clear register 4 (GTZC1_TZIC_FCR4)

Address offset: 0x02C

Reset value: 0x0000 0000

Secure privileged access only.

Bit 31 CMPCB6F : Clear the illegal access flag for MPCB6

0: No action

1: Status flag cleared

Bit 30 CSRAM6F : Clear the illegal access flag for 2.4 GHz RADIO RXTXRAM

0: No action

1: Status flag cleared

Bits 29:26 Reserved, must be kept at reset value.

Bit 25 CMPCB2F : Clear the illegal access flag for MPCBB2

0: No action

1: Status flag cleared

Bit 24 CSRAM2F : Clear the illegal access flag for SRAM2

0: No action

1: Status flag cleared

Bit 23 CMPCB1F : Clear the illegal access flag for MPCBB1

0: No action

1: Status flag cleared

Bit 22 CSRAM1F : Clear the illegal access flag for SRAM1

0: No action

1: Status flag cleared

Bits 21:16 Reserved, must be kept at reset value.

Bit 15 CTZICF : Clear the illegal access flag for GTZC1 TZIC

0: No action

1: Status flag cleared

Bit 14 CTZSCF : Clear the illegal access flag for GTZC1 TZSC

0: No action

1: Status flag cleared

Bit 13 CEXTIF : Clear the illegal access flag for EXTI

0: No action

1: Status flag cleared

Bit 12 Reserved, must be kept at reset value.

Bit 11 CRCCF : Clear the illegal access flag for RCC

0: No action

1: Status flag cleared

Bit 10 CPWRF : Clear the illegal access flag for PWR

0: No action

1: Status flag cleared

Bit 9 CTAMPF : Clear the illegal access flag for TAMP

0: No action

1: Status flag cleared

Bit 8 CRTCF : Clear the illegal access flag for RTC

0: No action

1: Status flag cleared

Bit 7 CSYSCFGF : Clear the illegal access flag for SYSCFG

0: No action

1: Status flag cleared

Bits 6:3 Reserved, must be kept at reset value.

Bit 2 CFLASH_REGF : Clear the illegal access flag for FLASH interface

0: No action

1: Status flag cleared

Bit 1 CFLASHF : Clear the illegal access flag for FLASH memory

0: No action

1: Status flag cleared

Bit 0 CGPDMA1F : Clear the illegal access flag for GPDMA1

0: No action

1: Status flag cleared

5.7.13 GTZC1 TZIC register map

Table 30. GTZC1 TZIC register map and reset values

1. Bit only available on STM32WBA62/64/65xx devices

2. Bit only available on STM32WBA62/65xx devices

5.8 GTZC1 MPCBB registers

All registers are accessed only by words (32-bit).

5.8.1 GTZC1 MPCBB control register (GTZC1_MPCBB_CR)

Address offset: 0x000

Reset value: 0x0000 0000

Secure privileged access only.

Bit 31 SRWILADIS : secure read/write illegal access disable

This bit disables the detection of an illegal access when a secure read/write transaction access a Nonsecure blocks of the block-based SRAM (secure fetch on Nonsecure block is always considered illegal).

0: enabled, secure read/write access not allowed on Nonsecure SRAM block

1: disabled, secure read/write access allowed on Nonsecure SRAM block

Bit 30 INVSECSTATE : SRAM clocks security state

This bit is used to define the internal SRAM clocks control in RCC as secure or not.

0: SRAM clock is secured if a secure area exists in the MPCBB. It is nonsecure if there is no secure area.

1: SRAM clock is Nonsecure even if a secure area exists in the MPCBB, and secure even if no secure block is set in the MPCBB.

Bits 29:1 Reserved, must be kept at reset value.

Bit 0 GLOCK : Lock the control register of the MPCBB until next reset

This bit is cleared by default and once set, it can not be reset until system reset.

0: Control register not locked

1: Control register locked

5.8.2 GTZC1 MPCBB configuration lock register (GTZC1_MPCBB_CFGLOCK)

Address offset: 0x010

Reset value: 0x0000 0000

Secure privileged access only.

Bits 31:28 Reserved, must be kept at reset value.

Bits 27:0 SPLCK[27:0] : Security/privilege configuration lock superblock (n = 0 to 27)

This bit is set by software and can be cleared only by system reset.

SPLCK[27:4] are only available for SRAM1 MPCBB1.

0: GTZC1_MPCBB_SECCFGFn and GTZC1_MPCBB_PRIVCFGFn can be written.

1: Writes to GTZC1_MPCBB_SECCFGFn and GTZC1_MPCBB_PRIVCFGFn are ignored

5.8.3 GTZC1 MPCBB security configuration for superblock n register (GTZC1_MPCBB_SECCFGRn)

Address offset: 0x100 + 0x04 * n, (n = 0 to 27)

Reset value: 0xFFFF FFFF

Registers 4 to 27 are only available from MPCBB1.

The given reset value is valid when TZEN = 1. The reset value is 0x0000 0000 when TZEN = 0.

Write access to this register is secure only. Any read is allowed.

Bits 31:0 SEC[31:0] : Security configuration for block y (y = 0 to 31) in super block n

0: Nonsecure access only to block y, belonging to super-block n. Secure access is also allowed if the SRWILADIS bit is set in GTZC1_MPCBB_CR.

1: Secure access only to block y, belonging to super-block n.

Unprivileged write to this bit is ignored if PRIVy bit is set in GTZC1_MPCBB_PRIVCFGRn.

Writes are ignored if SPLCKn bit is set in GTZC1_MPCBB_CFGLOCK.

5.8.4 GTZC1 MPCBB privileged configuration for superblock n register (GTZC1_MPCBB_PRIVCFGRn)

Address offset: 0x200 + 0x04 * n, (n = 0 to 27)

Reset value: 0xFFFF FFFF

Registers 4 to 27 are only available from MPCBB1.

The given reset value is valid when TZEN = 1. The reset value is 0x0000 0000 when TZEN = 0.

Write access to this register is privileged only. Any read is allowed.

Bits 31:0 PRIV[31:0] : Privileged configuration for block y (y = 0 to 31), belonging to super-block n.

• 0: Privileged and unprivileged access to block y, belonging to super-block n
• 1: Only privileged access to block y, belonging to super-block n

Nonsecure write to this bit is ignored if SECy bit is set in GTZC1_MPCBB_SECCFGFn.
Writes are ignored if SPLCKn bit is set in GTZC1_MPCBB_CFGLOCK.

5.8.5 GTZC1 MPCBB1 and MPCBB2 register map

Table 31. GTZC1 MPCBB1 and MPCBB2 register map and reset values

Table 31. GTZC1 MPCBB1 and MPCBB2 register map and reset values (continued)

• 1. Bit only available in MPCBB1
• 2. Registers 4 to 27 only available in MPCBB1

Refer to Table 26: GTZC subblocks .

5.8.6 GTZC1 MPCBB6 register map

Table 32. GTZC1 MPCBB6 register map and reset values