Hard Processor System Technical Reference Manual: Agilex™ 5 SoCs

ID 814346
Date 7/19/2024
Public
Document Table of Contents

13.4.2.1. Initiator Firewall and Security

All initiators on the system interconnect are expected to drive the secure bit attribute for every transaction. In addition to secure bit, each initiator is assigned a unique ID that identifies the source of a transaction. Accesses to secure targets by non-secure initiators result in a bus error. The following table shows the values of the initiator security bit.

Table 370.  Initiator Security Bit
Initiator Secure Bit Secure State Non-Secure State Source
AXI-AP A*PROT[1] 0 1 Driven by AXI-AP
CCU_IOS A*PROT[1] 0 1 Driven by CCU (transported from MPU & FPGA2HPS)
DMAx A*PROT[1] 0 1 Driven by DMA
ETR A*PROT[1] 0 1 Driven by ETR
SDM2HPS_LL A*PROT[1] 0 1 Driven by PSI
SDM2HPS_BE A*PROT[1] 0 1 Driven by PSI
EMACx (TSNx) A*PROT[1] 0 1 Driven by system manager
NAND A*PROT[1] 0 1 Driven by system manager
SD/eMMC A*PROT[1] 0 1 Driven by system manager
USB3.x A*PROT[1] 0 1 Driven by USB3.x
USB2.x HA*PROT[1] 0 1 Driven by system manager
EMAC_TBU A*PROT[1] 0 1 Driven by TBU (transported from EMAC/TSN or page table attribute)
ETR_TBU A*PROT[1] 0 1 Driven by TBU (transported from ETR or page table attribute)
SDM_TBU A*PROT[1] 0 1 Driven by TBU (transported from PSI or page table attribute)
IO_TBU A*PROT[1] 0 1 Driven by TBU (transported or page table attribute)
DMU_TBU A*PROT[1] 0 1 Driven by TBU (transported or page table attribute)
MPU_PP A*PROT[1] 0 1 Driven by DSU
COMBO_PHY N/A 0 --- Tie off to 0