Set secure id with TXE

[DVerb1]

We want to set some unique IDs on each device we have (based on e3825/e3845, win/linux platforms). Due to lack of information we've got some questions:

1. Is it possible to write to TXE memory some (our custom) values that cannot be changed in a future even with external programmer/blaster?

2. How that values can be read using some C/C++ API or via IOCTL? Is it possible under a UserMode or Ring0 is required?

Maybe we are trying to use inappropriate instrument/technology and we would be appreciated for any consideration.

[CarlosAM_INTEL]

Hello Dimaver,

Thank you for contacting the Intel Embedded Community.

The information that may help you is stated in the Bay Trail – M/D/T/I SoC Intel(R) Trusted Execution Engine [Intel(R) TXE] BIOS Writer's Guide document # 514966 that can be found at the following web site:

https://www-ssl.intel.com/content/www/us/en/secure/intelligent-systems/privileged/bay-trail/atom-e3800-m-d-t-i-soc-txe-bios-writers-guide.html?wapkw=514966 https://www-ssl.intel.com/content/www/us/en/secure/intelligent-systems/privileged/bay-trail/atom-e3800-m-d-t-i-soc-txe-bios-writers-guide.html

This document is classified as Intel confidential, which requires a CDNA between your company and Intel as well as a Privileged EDC account. To learn more about the benefits of a Privileged go to /www.intel.com/content/www/us/en/embedded/embedded-design-center-support.html http://www.intel.com/content/www/us/en/embedded/embedded-design-center-support.html. Then click on "APPLY NOW" found under the heading, "Apply for extras with privileged access to the Intel EDC¹". After you submit the application, please let us know and we will expedite the review of your application.

We suggest you to use your business email address, to evade any inconvenience. Please avoid the free email provider's address (such the provided by Hotmail, Gmail, yahoo, or others).

Please let us know if this information is useful to you.

Best Regards,

Carlos_A.