Visible to Intel only — GUID: mwh1409958643425
Ixiasoft
Visible to Intel only — GUID: mwh1409958643425
Ixiasoft
2.11.2. Specifying a Default Avalon Agent or AXI Subordinate
You can achieve an optimized secure system by partitioning your design and carefully designating secure or non-secure address maps to maintain reliable data. Avoid a design that includes a non-secure AXI manager or Avalon host that initiates transactions to a secure subordinate or agent resulting in unsuccessful transfers, within the same hierarchy.
A transaction that violates security is rerouted to the default subordinate or agent and subsequently responds to the AXI manager or Avalon host with an error. The following rules apply to specifying a default subordinate or agent:
- You can designate any AXI subordinate or Avalon agent as the default subordinate or agent.
- You can share a default subordinate or agent between multiple AXI managers or Avalon hosts, respectively.
- You should have one default subordinate or agent for each interconnect domain.
- An interconnect domain is a group of connected memory-mapped managers and subordinates or hosts and agents that share the same interconnect. The altera_error_response_slave component includes the required TrustZone® features.
- Specify interconnect security settings, as Configuring Platform Designer System Security describes.
- In the System View , right-click any column and turn on the Security and Default Slave columns.
- In the System View tab, turn on the Default Slave option for the subordinate or agent interface. A manager or host can have only one default subordinate or agent.
Figure 40. Security and Other Columns
Transaction Type |
TrustZone® -aware manager |
Non- TrustZone® -aware manager/host Secure |
Non- TrustZone® -aware manager/host Non-Secure |
---|---|---|---|
TrustZone® -aware subordinate memory |
OK |
OK |
OK |
Non- TrustZone® -aware subordinate/agent (secure) |
Per-access |
OK |
Not allowed |
Non- TrustZone® -aware subordinate/agent (non-secure) |
OK |
OK |
OK |
Non- TrustZone® -aware memory (secure region) |
Per-access |
OK |
Not allowed |
Non- TrustZone® -aware memory (non-secure region) |
OK |
OK |
OK |