Intel Agilex® 7 Device Security User Guide

ID 683823
Date 7/07/2023
Public
Document Table of Contents

5.7.1. Selecting and Enabling Security Options

To select and enable security options, do as follows:

From the Assignments menu, select Device ➤ Device and Pin Options ➤ Security ➤ More Options...
Selecting and Enabling Security Options

And then select the values from the drop-down lists for the security options that you want to enable as shown in the following example:

Selecting Values for Security Options

The following are the corresponding changes in the Quartus Prime Settings .qsf file:
set_global_assignment -name SECU_OPTION_DISABLE_JTAG "ON CHECK"
set_global_assignment -name SECU_OPTION_FORCE_ENCRYPTION_KEY_UPDATE "ON STICKY"
set_global_assignment -name SECU_OPTION_FORCE_SDM_CLOCK_TO_INT_OSC ON
set_global_assignment -name SECU_OPTION_DISABLE_VIRTUAL_EFUSES ON
set_global_assignment -name SECU_OPTION_LOCK_SECURITY_EFUSES ON
set_global_assignment -name SECU_OPTION_DISABLE_HPS_DEBUG ON
set_global_assignment -name SECU_OPTION_DISABLE_ENCRYPTION_KEY_IN_EFUSES ON
set_global_assignment -name SECU_OPTION_DISABLE_ENCRYPTION_KEY_IN_EFUSES ON
set_global_assignment -name SECU_OPTION_DISABLE_ENCRYPTION_KEY_IN_EFUSES ON
set_global_assignment -name SECU_OPTION_DISABLE_ENCRYPTION_KEY_IN_EFUSES ON
set_global_assignment -name SECU_OPTION_DISABLE_ENCRYPTION_KEY_IN_BBRAM ON
set_global_assignment -name SECU_OPTION_DISABLE_PUF_WRAPPED_ENCRYPTION_KEY ON