Secure Boot STM32H7RS How to Introduction

Target description

The purpose of this article is to provide the background knowledge needed to understand and execute the related "how to start".
This introduction article reviews some technical notions related to this topic.
More detailed explanations are available in the following articles:


1. Introduction

A boot path selection interface is embedded in the STM32CubeMX to help customers to select the boot configuration adapted to their needs.
The STM32CubeFW examples are using the provided script, configuration files, and user application codes.
The STM32CubeMX examples are using implicitly similar configuration files, but the appropriate boot path is chosen graphically through the tool and the initial codes are generated.

  • The STM32H7Rx devices have limited hardware cryptography support. The STiRoT (ST immutable root of trust) is not supported.
  • The STM32H7Sx devices are supporting full hardware cryptography. All possible boot paths are supported.
  • The STM32CubeMX tool provided by ST is available at the following link: STM32CubeMX installation file
  • How to proceed practically step by step is explained in the "how to" articles of the table below.

Note: The STM32H7Rx devices are also not embedding the MCE (Memory cipher engine) supporting on-the-fly encryption and decryption of external memory content.

The STM32CubeFW examples are using the provided script, configuration files, and user application codes.
The STM32CubeMX examples are using implicitly similar configuration files, but the appropriate boot path is chosen graphically through the tool and the initial codes and project structure are generated automatically. With STM32CubeMX, you can generate your own project in an easy to use and straightforward way.

  • The STM32CubeMX tool provided by ST is available at the following link: STM32CubeMX installation file
  • How to proceed practically step by step is explained in the different "how to" articles of the table below.


Product series STM32H7S picto.png STM32H7S picto.png Example source Introduction article Boot path
Development boards NUCLEO H7S3L8 (MB1737) DISCOVERY H7S78 (MB1167) - - -
Embedded flash size 64 k 64 k - - -
On board external flash size 256 Mbit 1 Gbit - - -
Immutable root of trust (iRoT)
STiRoT example - Link to how to STM32CubeFW Link 2
STM32CubeMX STiRoT example - Link to how to Wiki article using STM32CubeMX Link 2
STiRoT-OEMuRoT example - Link to how to STM32CubeFW Link 1
OEMiRoT example - Link to how to STM32CubeFW Link 4


  • Note:
    • NA: Not applicable
    • - : Possible boot path but dedicated example not available (refer to other existing examples)


2. STM32H7RS possible boot paths

The figure below shows the possible boot paths for STM32H7RS selected through the related user option byte.


Figure 1 H7RS possible boot paths

See table above:

  • The STM32CubeFW provides an example for the boot paths 1, 2 and 4.
  • An example is provided on how to generate a project for boot path 2, from scratch using STM32CubeMX.