Forum Discussion

rdrr's avatar
rdrr
Icon for Occasional Contributor rankOccasional Contributor
1 month ago

Agilex 5 with HPS

Hi,
I have a question regarding Agilex 5 with HPS.

I intend to deliver to the client a device based on Agilex 5 and HPS, but initially the HPS must remain fully offline. In other words, once the device is shipped, I need to ensure with 100% certainty that no software or program can be executed on the HPS, and that there is no possible way for the client to interact with or enable it prematurely.

At the same time, I need to retain the ability to remotely deploy a new FPGA bitstream at a later stage, which will enable the HPS once the HPS software development is completed.

Is such a workflow achievable on this platform?

Hps Arch
Hps Boot

2 Replies

  • SueC_Altera's avatar
    SueC_Altera
    Icon for Contributor rankContributor
    1 month ago

    Hi rdrr,

    The HPS boots off of code that is inserted into the HPS OCRAM by the SDM during the configuration process.  The OCRAM does not retain contents when power is not applied.

    You can use the HPS to update the FPGA with a new bitstream using Remote System Update. Please see this example for more information.

    Sue

     

  • kbrunham_altera's avatar
    kbrunham_altera
    Icon for New Contributor rankNew Contributor
    1 month ago

    The workflow I would recommend here is to enable Bitstream Authentication (https://www.intel.com/content/www/us/en/docs/programmable/683039/25-1-1/enabling-bitstream-security-for-and-devices.html) which will then require that only bitstreamed signed by you can be loaded on the device. Using this scheme you can control that the HPS will always be off by virtue of the designs you create.