Silicon Laboratories EFR32xG21 Wireless Gecko User manual

Secure Debug Lab Worksheet
This lab goes through the provisioning, secure debug lock and
unlock of EFR32xG21 devices.
1. Plug in your EFR32xG21 Wireless Starter Kit.
2. Device provisioning.
3. Secure debug Lock and unlock.
KEY POINTS
• Follow a few simple steps to provision
your EFR32xG21 device.
• Use Simplicity Studio to perform secure
debug lock and unlock.
silabs.com | Building a more connected world. Rev. 0.1

1. Getting Started
Simplicity Studio v4 with EFR32xG21 support must already be installed.
1. Setup your kit
a. Provide power to the EFR32xG21 WSTK board by connecting the USB J-Link debugger connector to the PC using the pro-
vided USB cable.
b. Move the Power Source Select switch to the AEM position.
2. Detect your device
a. Click [Refresh] button if the WSTK information does not display. The board may take some time to appear due to driver instal-
lations for the debug adapter.
b. Click the EFR32xG21 2.4 GHz 20 dBm Radio Board (BRD4180A). This will verify that the installation was successful, identify
the device on the kit hardware, and automatically configure the software tools for use with your device. It may use a different
EFR32xG21 radio board (e.g. BRD4181A) on your lab.
c. Click the Install link (if appear) to update the Adapter Firmware (version 1v3p4b970 or above) and Secure Firmware (ver-
sion 0.1.4 or above). You can install the updated adapter (S1015B_wireless_stk_firmware_package_1v4p0b1016.emz) and
secure firmware (s2c1_se_fw_upgrade_app_0v1p4.hex) from the USB flash drive if you cannot install them from the internet.
Secure Debug Lab Worksheet
Getting Started
silabs.com | Building a more connected world. Rev. 0.1 | 2

2. Provisioning
The provisioning is used to program the Command Key to Secure Element OTP for Secure Debug Unlock.
1. Right-click on the selected debug adapter [J-Link Silicon Labs (serial number)] to display the context menu.
2. Click the [Device configuration...] to open the device configuration window.
1
2
3. Click the [Security Settings] tab to get the selected device configuration (e.g. an unlocked device).
4. The Crypto Profile: None will display if no Crypto Profile has been selected. Click the None link to select Local Development
Crypto Profile and click [OK]. Skip this step if Crypto Profile: Local Development had already been selcted.
Secure Debug Lab Worksheet
Provisioning
silabs.com | Building a more connected world. Rev. 0.1 | 3

5. Click the [Start Provisioning Wizard...] button on the right side to display the [Secure Initialization] dialog box.
4
4
3
5
34
Secure Debug Lab Worksheet
Provisioning
silabs.com | Building a more connected world. Rev. 0.1 | 4

6. Click [Next >] to use the default configurable settings for secure initialization.
6
7. Click the [Get Local Development Key] button under [Command Key:] to get the Command Key from Local Development Cryp-
to Profile.
Secure Debug Lab Worksheet
Provisioning
silabs.com | Building a more connected world. Rev. 0.1 | 5

8. Click [Next >] to display the [Secure Locks] dialog box.
7
7
8
9. Uncheck all the boxes to disable the security features.
Secure Debug Lab Worksheet
Provisioning
silabs.com | Building a more connected world. Rev. 0.1 | 6

10. Click [Next >] to display the [Summary] window.
9
10
Secure Debug Lab Worksheet
Provisioning
silabs.com | Building a more connected world. Rev. 0.1 | 7

11. Click the [Provision] button if the information on the [Summary] window is correct.
11
11
Secure Debug Lab Worksheet
Provisioning
silabs.com | Building a more connected world. Rev. 0.1 | 8

12. Click [Yes] to proceed the provisioning process.
12
13. Click the [Done] button to finish the provisioning process.
Secure Debug Lab Worksheet
Provisioning
silabs.com | Building a more connected world. Rev. 0.1 | 9

14. Click the [OK] button to exit the provisioning process.
13
14
Note: Stop and wait here until directed by the lab instructor.
Secure Debug Lab Worksheet
Provisioning
silabs.com | Building a more connected world. Rev. 0.1 | 10

3. Secure Debug Lock and Unlock
3.1 Secure Debug Lock
1. Use steps 1 to 3 in 2. Provisioning to open the device configuration window.
2. Click the [Enable] button on [Enable Secure Debug Unlock:] to enable the secure debug unlock. The [Enable] button of [Enable
Secure Debug Unlock:] will change to [Disable].
3. Click the [Enable] button on [Enable Debug Lock:] to secure debug lock the device. The [Enable] button of [Enable Debug
Lock:] will be grayed out.
4. For lab purpose, we DO NOT disable Mass Erase for secure debug lock since this is a PERMANENT action. Click [OK] to finish.
2
3
4
4
5. Click [Tools] button to open [Tools Dialog] window.
6. Double click [Simplicity Commander] to launch Simplicity Commander.
6
5
7. Click the [Adapter][Connect] button to connect to a J-Link device (WSTK). The [Connect] button will change to [Disconnect] for
successful connection.
8. Click the [Target] [Connect] button to connect the debugger to the target device. The Could not connect to target device will
show up and MCU Information is grayed since the devcie is locked.
Secure Debug Lab Worksheet
Secure Debug Lock and Unlock
silabs.com | Building a more connected world. Rev. 0.1 | 11

9. Click [X] button to close the Simplicity Commander.
8
7
8
8
9
Note: Stop and wait here until directed by the lab instructor.
Secure Debug Lab Worksheet
Secure Debug Lock and Unlock
silabs.com | Building a more connected world. Rev. 0.1 | 12

3.2 Secure Debug Unlock
1. Click [Tools] button to open [Tools Dialog] window.
2. Double click [Simplicity IDE] to launch Simplicity IDE.
2
1
3. Click [Project]>[Import]>[MCU Project...] to open Project Search window.
3
4. Click [Browse...] to locate the project file in USB flash drive to be imported.
5. Select the project file based on your EFR32xG21 radio board (either blink_BRD4180A.sls or blink_BRD4181A.sls) then click
[Next>] to open the Build Configurations of the Project window.
6. Then click [Next>] to open the Project Configuration window.
Secure Debug Lab Worksheet
Secure Debug Lock and Unlock
silabs.com | Building a more connected world. Rev. 0.1 | 13

7. Then click [Finish] to open the selected Simplicity IDE project in default location.
4
5
5
6
7
8. Click the [Debug] button on highlighted project to build the project and start a debug session.
8
9. Select a device (grayed out in the device selector if the device is secure debug locked) to debug in the [Select Device] dialog box.
Secure Debug Lab Worksheet
Secure Debug Lock and Unlock
silabs.com | Building a more connected world. Rev. 0.1 | 14

10. Selected device will show an error message (Secure device with no Crypto Profile.) if no Crypto Profile has been selected. Click
the Manage Crypto Profiles link to open the [Crypto Profile Manager].
9
10
11. Select the [Local Development] profile in the [Crypto Profile Manager] dialog box, then click [OK].
12. The error message is now replaced by an informational message showing the currently selected Crypto Profile (Secure device
using Local Development profile.). This Crypto Profile will be associated with this device for future operations until Simplicity Stu-
dio is restarted, the device is disconnected, or the user re-opens the Crypto Profile Manager and changes the selection.
13. Click [OK] to proceed the debug session.
11
11
12
13
Secure Debug Lab Worksheet
Secure Debug Lock and Unlock
silabs.com | Building a more connected world. Rev. 0.1 | 15

14. Simplicity Studio unlocks the device in the background, then flashes the image to start the debug session. The device will remain
unlocked until the device is hard reset. The device is now ready to debug or run, click [Step Over] button several times to step over
the code.
14
15. Disconnect from the DEBUG session by clicking the [Disconnect] button.
15
16. Back to home page by clicking [Launcher] tab in the right top croner.
16
17. Use steps 5 to 7 in 3.1 Secure Debug Lock to launch Simplicity Commander and connect to the WSTK.
18. Click the [Target] [Connect] button to connect the debugger to the target device. The [Connect] button will change to [Reconnect]
for successful connection. The MCU Infromation is displayed since the device is unlocked.
Secure Debug Lab Worksheet
Secure Debug Lock and Unlock
silabs.com | Building a more connected world. Rev. 0.1 | 16

19. Click [X] button to close the Simplicity Commander.
18
18
19
20. The secure debug lock is reapplied by pressing the RESET button on the WSTK.
20
21. Use steps 5 to 9 in 3.1 Secure Debug Lock to verify the device is locked again.
22. Use steps 1 to 3 in 2. Provisioning to open the device configuration window.
Secure Debug Lab Worksheet
Secure Debug Lock and Unlock
silabs.com | Building a more connected world. Rev. 0.1 | 17

23. Press [Mass Erase] button to unlock the device and disable the secure debug unlock.
23
Secure Debug Lab Worksheet
Secure Debug Lock and Unlock
silabs.com | Building a more connected world. Rev. 0.1 | 18