From 426dd6ce882f902048a5cb4eb3d61c2cf6ace378 Mon Sep 17 00:00:00 2001 From: Seppo Takalo Date: Mon, 23 Dec 2024 14:50:49 +0200 Subject: [PATCH] doc: tfm: Add diagram to describe granularity Add diagram to show the granularity differences between each HW. Signed-off-by: Seppo Takalo --- doc/nrf/images/nrf-secure-rom-granularity.svg | 4 ++++ doc/nrf/images/secure-flash-regions.svg | 4 ++++ doc/nrf/security/tfm.rst | 14 ++++++++++++++ 3 files changed, 22 insertions(+) create mode 100644 doc/nrf/images/nrf-secure-rom-granularity.svg create mode 100644 doc/nrf/images/secure-flash-regions.svg diff --git a/doc/nrf/images/nrf-secure-rom-granularity.svg b/doc/nrf/images/nrf-secure-rom-granularity.svg new file mode 100644 index 000000000000..37d15b80e01f --- /dev/null +++ b/doc/nrf/images/nrf-secure-rom-granularity.svg @@ -0,0 +1,4 @@ + + + +
32 kB
32 kB
 16 kB
4 kB
4 kB
4 kB
4 kB
4 kB
4 kB
 16 kB
nRF54
nRF53
nRF91
Aligning to Flash regions
4 kB
 16 kB
32 kB
nRF54
nRF53
nRF91
TF-M binary
Different granularity on each HW
TF-M Secure Storage
Required section sizes
\ No newline at end of file diff --git a/doc/nrf/images/secure-flash-regions.svg b/doc/nrf/images/secure-flash-regions.svg new file mode 100644 index 000000000000..51cebea6bceb --- /dev/null +++ b/doc/nrf/images/secure-flash-regions.svg @@ -0,0 +1,4 @@ + + + +
Device flash memory
32 kB
32 kB
32 kB
32 kB
32 kB
32 kB
32 kB
32 kB
32 kB
32 kB
32 kB
32 kB
32 kB
32 kB
32 kB
32 kB
32 kB
32 kB
Non-secure flash area
Secure flash area
Secure Flash area
B0
32 Kb
MCUboot
Slot 0
MCUboot
Slot 1
Application image
Update slot
TF-M storage
TF-M
app
32 kB
Configurable region size
ITS
PS
32 kB
32 kB
32 kB
32 kB
32 kB
32 kB
\ No newline at end of file diff --git a/doc/nrf/security/tfm.rst b/doc/nrf/security/tfm.rst index c95f0d33f0ab..34510c88e20b 100644 --- a/doc/nrf/security/tfm.rst +++ b/doc/nrf/security/tfm.rst @@ -196,9 +196,23 @@ On nRF54L15 devices, TF-M uses the MPC to enforce the security policy between th - 4 kB - 4 kB +.. figure:: /images/nrf-secure-rom-granularity.svg + :alt: Partition alignment granularity + :width: 80% + :align: center + + Partition alignment granularity on different nRF devices. + When the :ref:`partition_manager` is enabled, it will take into consideration the alignment requirements. But when the static partitions are used, the user is responsible for following the alignment requirements. +.. figure:: /images/secure-flash-regions.svg + :alt: Example of aligning partitions with flash regions + :width: 80% + :align: center + + Example of aligning partitions with flash regions. + If you are experiencing any partition alignment issues when using the Partition Manager, check the :ref:`known_issues` page on the main branch. The partitions which need to be aligned with the TrustZone flash region size are partitions ``tfm_nonsecure`` and ``nonsecure_storage``.