TI’s 2nd stage boot (BL2) – updatable TI bootloader:
Secured vendor code
execution environment (for deployed end-devices or at vendor's R&D
where the vendor application is being deployed):
Authenticates
Vendor’s image (signed MCUboot images using ECC)
Enforcement of
initial system working point through authenticated vendor
configurations (part of the signed MCUboot image)
Provide device level secured management utilities:
Device activation a one-time process in which the vendor changes
the device ownership from TI to the vendor. Until activation is
done, the device is locked for programming.
Device initial programming required for 1st time programming of
the device fuses and flash (for production line).
Device re-programming for updating images on devices that
already underwent initial programming (for vendor applications
development purpose)
Device debug control to enable/disable debug capabilities