
1.5 HSEC 180-pin Control Card Docking Station
The TMDSHSECDOCK 180-pin docking station is available for purchase through Texas Instruments. The
docking station is a baseboard that enables rapid prototyping. There is a power switch on the docking station
that determines whether power to the Control Card is supplied by the 5 V connector or the USB connector.
Note
The docking station power switch must be toggled to the EXT-ON side to meet the power
requirements of the AM263x Control Card. EXT-ON indicates that the power is being sourced from
the Barrell connector of the Control Card Dock. The mini-USB (USB-ON) connector does not meet the
power requirements of the AM263x Control Card.
The AM263x Control Card has a power mux (TPS2121RUXT) that supplies power from the type-C connection,
as long as the voltage supplied by the type-C connection is equal to or greater than the voltage supplied by the
HSEC docking station. Therefore, if both a type-C connection is present and the Control Card is connected to a
powered HSEC docking station, then the power mux routes the type-C supplied voltage to VMAIN of the Control
Card. If there is no type-C connection and voltage is being supplied through the HSEC docking station, then the
power mux routes that voltage to VMAIN of the Control Card.
For more information on the docking station, refer to the 180-Pin Docking Station Informational Guide.
1.6 Security
The AM263x Control Card features a High Security, Field Securable (HS-FS) device. An HS-FS device has the
ability to use a one time programming to convert the device from HS-FS to High Security, Security Enforced
(HS-SE).
The AM263x device leaves the TI factory in an HS-FS state where customer keys are not programmed and has
the following attributes:
• Does not enforce the secure boot process
• M4 JTAG port is closed
• R5 JTAG port is open
• Security Subsystem firewalls are closed
• SoC Firewalls are open
• ROM Boot expects a TI signed binary (encryption is optional)
• TIFS-MCU binary is signed by the TI private key
The One Time Programmable (OTP) keyrwriter converts the secure device from HS-FS to HS-SE. The OTP
keywriter programs customer keys into the device eFustes to enforce secure boot and establish a root of trust.
The secure boot requires an image to be encrypted (optional) and signed using customer keys, which is verified
by the SoC. A secure device in the HS-SE state has the following attributes:
• M4, R5 JTAG ports are both closed
• Security Subsystems and SoC Firewalls are both closed
• TIFS-MCU and SBL need to be signed with active customer key
www.ti.com Evaluation Module Overview
SPRUJ93 – AUGUST 2023
Submit Document Feedback
AM263x Control Card with PMIC and Automotive Ethernet 5
Copyright © 2023 Texas Instruments Incorporated