Tamper Protection security mode allows only encrypted bitstream to program the FPGA only, meanwhile for JTAG Security mode, it allows the access of JTAG to certain feature only.
You may refer to user guide below for the implementation:
You will need to use follow the guide to burn the fuse for each setting or using Qcrypt tool to enable all of these design security modes. The Qcrypt tool provides an impermanent solution compared to the burning the fuse which has the one-time programming limitation.
For more information, please refer to the link below: