Intel® Quartus® Prime Pro Edition User Guide: Platform Designer

ID 683609
Date 6/26/2023
Public

A newer version of this document is available. Customers should click here to go to the newest version.

Document Table of Contents

2.12.1. System Security Options

Table 15.  Security Options
Option Description
Secure The Avalon host or AXI manager sends only secure transactions, and the Avalon agent or AXI subordinate receives only secure transactions. Platform Designer treats transactions from a secure manager as secure. Platform Designer blocks non-secure transactions to a secure agent or subordinate and routes to the default agent or subordinate.
Non-Secure The host or manager sends only non-secure transactions, and the agent or subordinate receives any transaction, secure or non-secure. Platform Designer treats transactions from a non-secure host or manager as non-secure. Platform Designer allows all transactions, regardless of security status, to reach a non-secure agent or subordinate.
Secure Ranges Applies to only the agent or subordinate interface. Allows you to specify secure memory regions for an agent or subordinate. Platform Designer blocks non-secure transactions to secure regions and routes to the default agent or subordinate. The specified address ranges within the agent or subordinate's address span are secure, all other address ranges are not. The format is a comma-separated list of inclusive-low and inclusive-high addresses, for example, 0x0:0xfff,0x2000:0x20ff
TrustZone-aware TrustZone-aware managers have signals that control the security status of their transactions. TrustZone-aware subordinates can accept these signals and handle security independently.

The following applies to secure systems that mix secure and non- TrustZone® -aware components:

  • All AXI, AMBA* 3 AXI, and AMBA* 3 AXI-Lite managers are TrustZone® -aware.
  • You can set AXI, AMBA* 3 AXI, and AMBA* 3 AXI-Lite subordinates as TrustZone® -aware, secure, non-secure, or secure range ranges.
  • You can set non-AXI host interfaces as secure or non-secure.
  • You can set non-AXI agent interfaces as secure, non-secure, or secure address ranges.