1. What is TF-M?
TF-M (Trusted Firmware for Cortex-M) is an open-source reference implementation of runtime trusted execution environment operating system that follows the Arm(R) Platform Security Architecture (PSA) for Cortex-M. TF-M is hosted under www.trustedfirmware.org. It supports ArmV8-M and ArmV8.1-M architectures.
TF-M supports the following security functions:
- Secure boot
- Secure firmware update
- Isolation
- Internal trusted storage
- Protected storage
- Cryptography
- Attestation
Detailed descriptions of TF-M functions, services and usage are provided in TF-M documentation
2. TF-M on STM32H5
The support of STM32H5 series through STM32H573I_DK board has been uploaded in TF-M repository. It consists in 3 binaries: a secure boot stage (aka BL2), a TF-M secure application and TF-M non-secure application example.
2.1. TF-M binaries generation
To configure and build the Trusted Firmware-M (TF-M) binaries for STM32H573I_DK board, please follow the instructions provided in STM32H573I_DK configuration and build
2.2. TF-M programming
Once generated, follow the instructions provided in STM32H5 programming to program and run TF-M binaries on STM32H573I_DK board.