Specifications

Steps for Implementing a Secure Configuration Flow Page 19
Using the Design Security Features in Altera FPGAsJune 2012 Altera Corporation
Step 2b: Program the Non-Volatile Key into the FPGAs
Before programming the non-volatile key into the devices, ensure that you can
successfully configure the FPGA with an unencrypted configuration file. The
non-volatile key is one-time programmable through the JTAG interface. You can
program the non-volatile key into the devices without an external battery. Devices
with the non-volatile key successfully programmed can accept both encrypted and
unencrypted configuration bitstreams unless the tamper protection bit is set, in which
case only encrypted configuration bitstreams are accepted. This enables the use of
unencrypted configuration bitstreams for board-level testing.
Any attempt to configure the device containing the non-volatile key with a
configuration file encrypted with the wrong key causes the configuration to fail. If this
occurs, the nSTATUS signal from the FPGA pulses low and continues to reset itself.
You can program the non-volatile key into the devices using on-board prototyping,
volume production, and off-board prototyping and production solutions listed in
Table 4 on page 4.
Volatile or Non-Volatile Key Programming Using EthernetBlaster and
Quartus II Software
Connect the EthernetBlaster communications cable to the EthernetBlaster header as
shown in Figure 18.
f For additional information about connecting the EthernetBlaster communications
cable, refer to the EthernetBlaster Communications Cable User Guide.
Figure 18. EthernetBlaster Header
(1), (2)
Notes to Figure 18:
(1) A 1-KΩ pull-down resistor is added to the TCK while 10-KΩ pull-up resistors are added to the TMS and TDI
signals for key programming.
(2) The EthernetBlaster header and USB-Blaster header are identical for key programming.
(3) For the specific voltages required using the JTAG download cable, refer to the Device Configuration, Secure Design
and Remote System Upgrades chapter of the respective device handbook.
EthernetBlaster Header
J28
2
4
6
8
10
1
3
5
7
9
TCK
JTAG_CONN_TDO
JTAG_TMS
JTAG_CONN_TDI
1 KΩ
10 KΩ
10 KΩ
VCC (3
)