An INI is required to enable the JTAG Security feature in Intel® MAX® 10 devices. Once the INI has been placed in your Intel® Quartus® Prime project directory, enable the option by accessing the MAX 10 Device options menu from the Convert Programming Files (CPF) settings.
Note: when JTAG Secure mode is enabled, it will prevent any user access via the JTAG pins (which includes programming, examining, verifying, and erasing functions). In secure mode, the device will only accept SAMPLE/PRELOAD, BYPASS, EXTEXT, and IDCODE JTAG instructions. To unlock secure mode (for example to allow you to reprogram the device), you must implement an Intel MAX 10 JTAG atom (WYSIWYG type component) in the device that can be accessed only via the core. This will allow you to issue the JTAG UNLOCK instruction.
See section 3.9 (titled Intel MAX 10 JTAG Secure Design Example) in the Intel MAX 10 FPGA Configuration User Guide for more information.
Create a quartus.ini file with this setting:
PGM_ENABLE_MAX10_JTAG_SECURITY=ON
and place the file in your Intel Quartus Prime project directory.
Access the ‘Enable JTAG security’ setting via File -> Convert programming files -> Options/Boot info (with configuration mode = internal).