Renesas R5F565NEHDFC Application Note

STZAN0114EN0100

1

Application Note

STZAN0114EN0100
Revision 1.00

April 2019

Getting Started with Embedded Trust and the RX65x

Introduction

This application note describes the use of the Embedded Trust and C-Trust security development environments
with the Renesas RSK+RX65N-2MB Starter Kit. The Renesas RSK series includes an LCD display module and

E2 Lite debugging emulator. The RSK also offers additional peripherals to extend the features of the board and

ease the development of custom security designs.

Target Devices

This application note refers to the following secure microcontroller :

➢ Renesas Electronics R5F565NEHDFC microcontrollers

Related Documents

➢ Renesas RSK+RX65N-2MB User’s Manual (R20UT3888EG0200 Rev 2.00 Dec 2017)
➢ E1/E20/E2 Emulator, E2 Emulator Lite (R20UT0399EJ1200 Rev.12.00 Nov 2018)
➢ Embedded Trust User Guide (available from Secure Thingz & IAR Systems websites)

STZAN0114EN0100

2

1. Kit Overview

The Renesas RSK+RX65N-2MB Starter Kit is a hardware platform for the evaluation of the Renesas RX65N
device. The Renesas RSK+RX65N-2MB Starter Kit part number is as follows:

• YRTK50565N200010BE (Renesas RSK+RX65N-2MB Kit CS+ & E2Lite-Encrypted)

The board offers a set of features that enables the user to get started with the microcontroller peripherals
immediately and to obtain an understanding of how to integrate the device in their required design.

This application note is primarily concerned with the RX65N-2MB device and RSK+RX65N-2MB Kit. Figure 1
shows the features of the Renesas RSK+RX65N-2MB Starter Kit.

Figure 1: Renesas RSK+RX65N-2MB Starter Kit features

Please refer to the Renesas RSK+RX65N-2MB User’s Manual (section 7) (see Related Documents) for details of
the implementation of connectors and headers on the starter kit.

STZAN0114EN0100

3

2. Getting Started

Download and install the following :

➢ IAR Systems Embedded Workbench for RX provided by IAR Systems
➢ Embedded Trust security development environment provided by Secure Thingz
➢ C-Trust extension to IAR Embedded Workbench provided by IAR Systems

Refer to the Installation and Licensing Quick Reference Guide available from the IAR Systems website to
determine PC system requirements.

Launch Embedded Trust for RX. The tool will open as per that shown in Figure 2.

Figure 2: Embedded Trust for RX opening screen

Click on Example Projects -> Embedded Trust -> Getting Started -> RX65N Open Project (see Figure 3)

Figure 3: Open Getting Started project

An explorer dialog will open requiring the destination folder for the project to be located. Direct the open dialog
box to the folder to be used for the project and click “Select Folder”.

With the folder selected (and additional folder expansion), the IDE will look like that shown in Figure 4.

STZAN0114EN0100

4

Figure 4: Embedded Trust with Getting Started project loaded

Click on the Project tab and select “Create New Project” in the dropdown menu. The dialog box shown in

Figure 5 will be displayed. Click on the “Tool chain” dropdown and select “RX”.
We wish to add security to the Getting Started project we have just loaded so click on Secure Boot Manager in
the “Create New Project” dialog box and click “OK”.

Figure 5: Select Secure Boot Manager in Create New Project dialog box

An explorer dialog will open requiring a filename for the Secure Boot Manager project. Enter the filename to be
used into the open dialog box and click “Save”. In this example we have used SBM as the filename.

The IDE will now load the additional Secure Boot Manager project and look like that shown in Figure 6.

STZAN0114EN0100

5

Figure 6: IDE with Secure Boot Manager project loaded and active

Please read the Readme.txt file that is displayed in the IDE. This file includes important configuration information
for projects that are to have security added i.e. integrated with a Secure Boot Manager. Please note that "Erase
flash ROM before download" is enabled by default in the Hardware Setup dialog box (available on the debugger
driver menu in the IDE)

2.1 Configuring the Secure Boot Manager

The Secure Boot Manager project must now be configured for the RX65N. The configuration will be carried out
via the Project -> Options… menu provided by the IDE. To access this menu, right click on the SBM-Debug
project and select “Options…” in the dropdown menu (see Figure 7).

Figure 7: Selecting Project -> Options menu

STZAN0114EN0100

6

The menu for Options for node “SBM” will open. Select the “General Options” category and click on the
“Target” tab. Select the Device type as “R5F565NE”.

Select the “Debugger” category and select the “E2 Lite” Driver.

Select the “Security” category and click the Enable check box. The Embedded Trust dialog box shown in Figure

8 should be the resultant display.

Figure 8: Embedded Trust dialog box

We will now create a Security Context for the Secure Boot Manager project.