AN 556: Using the Design Security Features in Intel FPGAs

Download
ID 683269
Date 5/21/2021
Public
Document Table of Contents

JTAG Secure Mode for 28-nm and 20-nm FPGAs

FPGAs are in JTAG Secure mode upon power up when you:

  • Enable the tamper-protection bit for 28-nm FPGAs
  • Enable the JTAG Secure settings for 20-nm FPGAs
Attention: 20-nm FPGAs do not support LOCK and UNLOCK JTAG instructions, you are not able to unlock external JTAG to access non-mandatory JTAG instructions.

During JTAG secure mode, many JTAG instructions are disabled. The 28-nm and 20-nm FPGAs in JTAG secure mode only allow you to exercise mandatory IEEE Std. 1149.1 and IEEE Std. 1149.6 BST JTAG instructions. If you attempt to exercise a non-mandatory JTAG instruction when the FPGA is in the JTAG secure mode, the BYPASS JTAG instruction chain is selected and the instruction is not executed.

Table 17.  Mandatory and Non-Mandatory IEEE Std. 1149.1 and IEEE Std. 1149.6 BST JTAG Instructions
Mandatory IEEE Std. 1149.1 and IEEE Std. 1149.6 BST JTAG Instructions Non-Mandatory IEEE Std. 1149.1 and IEEE Std. 1149.6 BST JTAG Instructions
  • BYPASS
  • EXTEST
  • IDCODE
  • LOCK
  • UNLOCK
  • SAMPLE/PRELOAD
  • SHIFT_EDERROR_REG
  • CONFIG_IO
  • CLAMP
  • EXTEST_PULSE 18
  • EXTEST_TRAIN 18
  • HIGHZ
  • KEY_CLR_VREG
  • KEY_VERIFY 18
  • PULSE_NCONFIG
  • USERCODE

For 28-nm FPGAs, to enable the access of non-mandatory JTAG instructions, you must issue the UNLOCK JTAG instruction to deactivate the JTAG secure mode. You can issue the LOCK instruction to put the device back into JTAG secure mode. You can only issue both the LOCK and UNLOCK JTAG instructions during user mode using internal JTAG interface. Issuing these two instructions using the external JTAG pins does not activate or deactivate the JTAG secure mode.

The LOCK and UNLOCK JTAG instructions only activate or deactivate the JTAG secure mode on an FPGA with tamper-protection bit enabled. Issuing these two instructions on a device that has a tamper-protection bit disabled does not turn on or turn off the JTAG secure mode.

18 You can execute these JTAG instructions during JTAG Secure mode for 20-nm FPGAs.

Did you find the information on this page useful?

Characters remaining:

Feedback Message