Visible to Intel only — GUID: mwh1409958643425
Ixiasoft
Visible to Intel only — GUID: mwh1409958643425
Ixiasoft
1.11.2. Specifying a Default Avalon Agent or AXI Subordinate
You can achieve an optimized secure system by partitioning your design and carefully designating secure or non-secure address maps to maintain reliable data. Avoid a design that includes a non-secure AXI manager or Avalon host that initiates transactions to a secure subordinate or agent resulting in unsuccessful transfers, within the same hierarchy.
A transaction that violates security is rerouted to the default subordinate or agent and subsequently responds to the AXI manager or Avalon host with an error. The following rules apply to specifying a default subordinate or agent:
- You can designate any AXI subordinate or Avalon agent as the default subordinate or agent.
- You can share a default subordinate or agent between multiple AXI managers or Avalon hosts, respectively.
- You should have one default subordinate or agent for each interconnect domain.
- An interconnect domain is a group of connected memory-mapped managers and subordinates or hosts and agents that share the same interconnect. The altera_error_response_slave component includes the required TrustZone® features.
-
Note: If you do not specify a value for the Default Slave option, and the Automate default slave insertion option is off, Platform Designer automatically assigns the AXI subordinate or Avalon agent in the system. Platform Designer automatically assigns the AXI subordinate or Avalon agent that has largest address span within the memory map for the issuing AXI manager or Avalon host. In the case of multiple, large AXI subordinates or Avalon agents that have the same address span, Platform Designer selects the AXI subordinate or Avalon agent at the lowest base offset.
- Specify interconnect security settings, as Configuring Platform Designer System Security describes.
- In the System View , right-click any column and turn on the Security and Default Slave columns.
- In the System View tab, turn on the Default Slave option for the subordinate or agent interface. A manager or host can have only one default subordinate or agent.
Figure 76. Security and Other Columns
Transaction Type |
TrustZone® -aware manager |
Non- TrustZone® -aware manager/host Secure |
Non- TrustZone® -aware manager/host Non-Secure |
---|---|---|---|
TrustZone® -aware subordinate memory |
OK |
OK |
OK |
Non- TrustZone® -aware subordinate/agent (secure) |
Per-access |
OK |
Not allowed |
Non- TrustZone® -aware subordinate/agent (non-secure) |
OK |
OK |
OK |
Non- TrustZone® -aware memory (secure region) |
Per-access |
OK |
Not allowed |
Non- TrustZone® -aware memory (non-secure region) |
OK |
OK |
OK |