<tns:profile xmlns:tns="http://www.qualcomm.com/sectools" id="PINNACLES" minimum_sectools_version="1.20" schema_version="1.4">
    <platform_binding_values>
        <soc_hw_versions>
            <value>0xA00B</value>
        </soc_hw_versions>
        <product_segment_ids>
            <value variant="PINNACLES">0x00</value>
        </product_segment_ids>
    </platform_binding_values>
    <authentication>
        <image_list>
            <image id="MPSS" authenticator_oem="TME-FW">
                <sw_id>0x2</sw_id>
            </image>
            <image id="DEVICE-PROGRAMMER" authenticator_oem="TME-PBL">
                <sw_id>0x3</sw_id>
            </image>
            <image id="TZ-DEVCFG" authenticator_oem="TME-FW">
                <sw_id>0x5</sw_id>
            </image>
            <image id="TZ" authenticator_oem="TME-FW" authenticator_qti="TME-FW">
                <sw_id>0x7</sw_id>
            </image>
            <image id="UEFI" authenticator_oem="TME-FW">
                <sw_id>0x9</sw_id>
            </image>
            <image id="TZ-APP-OEM" authenticator_oem="TA-LOADER">
                <sw_id>0xC</sw_id>
            </image>
            <image id="TZ-APP-OEM-BACKWARDS-COMPATIBLE" authenticator_oem="TA-LOADER">
                <sw_id>0xC</sw_id>
                <image_format>ELF-V6</image_format>
            </image>
            <image id="TZ-APP-QTI" authenticator_oem="TA-LOADER" authenticator_qti="TA-LOADER">
                <sw_id>0xC</sw_id>
            </image>
            <image id="QHEE" authenticator_oem="TME-FW" authenticator_qti="TME-FW">
                <sw_id>0x15</sw_id>
            </image>
            <image id="VIP" authenticator_oem="TME-FW">
                <sw_id>0x1A</sw_id>
            </image>
            <image id="EFS-TAR" authenticator_oem="MODEM">
                <sw_id>0x1B</sw_id>
                <image_format>ELF-V7-EFS-TAR</image_format>
            </image>
            <image id="ABL" authenticator_oem="TZ-PIL">
                <sw_id>0x1C</sw_id>
            </image>
            <image id="IPA-FW" authenticator_oem="TME-FW">
                <sw_id>0x1D</sw_id>
            </image>
            <image id="TZ-TEE" authenticator_oem="TZ-PIL">
                <sw_id>0x1E</sw_id>
            </image>
            <image id="CMNLIB" authenticator_oem="TZ-PIL" authenticator_qti="TZ-PIL">
                <sw_id>0x1F</sw_id>
            </image>
            <image id="SHRM" authenticator_oem="TME-FW" authenticator_qti="TME-FW">
                <sw_id>0x20</sw_id>
            </image>
            <image id="AOP" authenticator_oem="TME-FW" authenticator_qti="TME-FW">
                <sw_id>0x21</sw_id>
            </image>
            <image id="OEM-MISC" authenticator_oem="TME-FW">
                <sw_id>0x22</sw_id>
                <image_format>ELF-V7-OEM-MISC</image_format>
            </image>
            <image id="QTI-MISC" authenticator_qti="TME-FW">
                <sw_id>0x23</sw_id>
                <image_format>ELF-V7-QTI-MISC</image_format>
            </image>
            <image id="QUPV3" authenticator_oem="TZ-PIL" authenticator_qti="TZ-PIL">
                <sw_id>0x24</sw_id>
            </image>
            <image id="XBL-CONFIG" authenticator_oem="TME-FW">
                <sw_id>0x25</sw_id>
            </image>
            <image id="SEC-ELF" authenticator_oem="TME-FW">
                <sw_id>0x2B</sw_id>
            </image>
            <image id="IPA-MICRO-CODE" authenticator_oem="TZ-PIL">
                <sw_id>0x2D</sw_id>
            </image>
            <image id="CPUCP" authenticator_oem="TME-FW" authenticator_qti="TME-FW">
                <sw_id>0x31</sw_id>
            </image>
            <image id="TME-FW" authenticator_oem="TME-PBL" authenticator_qti="TME-PBL">
                <sw_id>0x35</sw_id>
            </image>
            <image id="XBL-SC" authenticator_oem="TME-PBL" authenticator_qti="TME-PBL">
                <sw_id>0x36</sw_id>
            </image>
            <image id="TOOLS-FV" authenticator_oem="TME-FW">
                <sw_id>0x3A</sw_id>
            </image>
            <image id="QUANTUM-FV" authenticator_oem="TME-FW">
                <sw_id>0x3B</sw_id>
            </image>
            <image id="QUEST-FV" authenticator_oem="TME-FW">
                <sw_id>0x3C</sw_id>
            </image>
            <image id="AOP-CONFIG" authenticator_oem="TME-FW">
                <sw_id>0x3D</sw_id>
            </image>
            <image id="RFC" authenticator_oem="MODEM">
                <sw_id>0x3E</sw_id>
            </image>
            <image id="MCFG" authenticator_oem="MODEM">
                <sw_id>0x40</sw_id>
            </image>
            <image id="XBL-RAM-DUMP" authenticator_oem="TME-FW">
                <sw_id>0x42</sw_id>
            </image>
            <image id="Q6-MPSS-DTB" authenticator_oem="TME-FW">
                <sw_id>0x51</sw_id>
            </image>
            <image id="MPSS-OEM-PD" authenticator_oem="MODEM">
                <sw_id>0x63</sw_id>
            </image>
            <image id="MVM-FW" authenticator_oem="TZ-PIL" authenticator_qti="TZ-PIL">
                <sw_id>0x6A</sw_id>
            </image>
            <image id="KERNEL-BOOT" authenticator_oem="TME-FW">
                <sw_id>0x71</sw_id>
            </image>
            <image id="MPSS-OEM-PD-DTB" authenticator_oem="MODEM">
                <sw_id>0x7A</sw_id>
            </image>
            <image id="GVM1" authenticator_oem="TZ-PIL">
                <sw_id>0x81</sw_id>
            </image>
            <image id="GVM2" authenticator_oem="TZ-PIL">
                <sw_id>0x82</sw_id>
            </image>
            <image id="GVM3" authenticator_oem="TZ-PIL">
                <sw_id>0x83</sw_id>
            </image>
            <image id="GVM4" authenticator_oem="TZ-PIL">
                <sw_id>0x84</sw_id>
            </image>
            <image id="STX" authenticator_oem="MODEM">
                <sw_id>0x86</sw_id>
            </image>
            <image id="DEBUG-POLICY" authenticator_oem="TME-FW">
                <sw_id>0x200</sw_id>
            </image>
        </image_list>
        <authenticators>
            <authenticator id="TME-PBL">
                <supported_image_formats>
                    <image_format id="ELF-V7">
                        <file_type>ELF</file_type>
                        <elf_properties>
                            <elf_class>
                                <default_elf_class>32</default_elf_class>
                                <supported_elf_classes>
                                    <value>32</value>
                                    <value>64</value>
                                </supported_elf_classes>
                            </elf_class>
                            <contains_preamble>false</contains_preamble>
                        </elf_properties>
                        <hash_table_segment_properties>
                            <hash_table_segment_placements>
                                <default_hash_table_segment_placement>END</default_hash_table_segment_placement>
                                <supported_hash_table_segment_placements>
                                    <value>ANY</value>
                                </supported_hash_table_segment_placements>
                            </hash_table_segment_placements>
                            <hash_table_segment_alignment>0x1000</hash_table_segment_alignment>
                            <hash_pages>false</hash_pages>
                            <segment_hash_algorithms>
                                <default_segment_hash_algorithm>SHA384</default_segment_hash_algorithm>
                                <supported_segment_hash_algorithms>
                                    <value>SHA384</value>
                                </supported_segment_hash_algorithms>
                            </segment_hash_algorithms>
                            <hash_table_segment_version>7</hash_table_segment_version>
                            <hash_table_segment_metadata_versions>
                                <default_hash_table_segment_metadata_version>3.0</default_hash_table_segment_metadata_version>
                                <supported_hash_table_segment_metadata_versions>
                                    <value>2.0</value>
                                    <value>3.0</value>
                                </supported_hash_table_segment_metadata_versions>
                            </hash_table_segment_metadata_versions>
                            <hash_table_segment_common_metadata_versions>
                                <default_hash_table_segment_common_metadata_version>0.0</default_hash_table_segment_common_metadata_version>
                                <supported_hash_table_segment_common_metadata_versions>
                                    <value>0.0</value>
                                </supported_hash_table_segment_common_metadata_versions>
                            </hash_table_segment_common_metadata_versions>
                        </hash_table_segment_properties>
                    </image_format>
                </supported_image_formats>
                <default_image_format>ELF-V7</default_image_format>
                <supported_oem_signing_features>
                    <supports_vouch_for>false</supports_vouch_for>
                    <default_signature_format>ECDSA384</default_signature_format>
                    <signature_formats>
                        <signature_format id="ECDSA384">
                            <signature_algorithm>ECDSA</signature_algorithm>
                            <signature_hash_algorithms>
                                <default_signature_hash_algorithm>SHA384</default_signature_hash_algorithm>
                                <supported_signature_hash_algorithms>
                                    <value>SHA384</value>
                                </supported_signature_hash_algorithms>
                            </signature_hash_algorithms>
                            <ecdsa_curves>
                                <default_ecdsa_curve>SECP384R1</default_ecdsa_curve>
                                <supported_ecdsa_curves>
                                    <value>SECP384R1</value>
                                </supported_ecdsa_curves>
                            </ecdsa_curves>
                        </signature_format>
                    </signature_formats>
                    <serial_bind>
                        <supported>true</supported>
                        <supports_single_serial>true</supports_single_serial>
                        <supports_multi_serials>true</supports_multi_serials>
                    </serial_bind>
                    <debug>
                        <supported>true</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </debug>
                    <uie_key_switch_enable>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </uie_key_switch_enable>
                    <root_revoke_activation_enable>
                        <supported>true</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </root_revoke_activation_enable>
                    <supports_root_revoke_activation_enable_as_combined>true</supports_root_revoke_activation_enable_as_combined>
                    <crash_dump>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </crash_dump>
                    <supports_oem_id_product_id_independent>true</supports_oem_id_product_id_independent>
                    <supports_anti_rollback_version>true</supports_anti_rollback_version>
                    <mrc_specs>
                        <default_mrc_spec>2.0</default_mrc_spec>
                        <supported_mrc_specs>
                            <value>2.0</value>
                        </supported_mrc_specs>
                    </mrc_specs>
                    <certificate_chain_depths>
                        <default_certificate_chain_depth>3</default_certificate_chain_depth>
                        <supported_certificate_chain_depths>
                            <value>2</value>
                            <value>3</value>
                        </supported_certificate_chain_depths>
                    </certificate_chain_depths>
                    <platform_bindings>
                        <default_platform_bindings>
                            <value>SOC-HW-VER</value>
                        </default_platform_bindings>
                        <supported_platform_bindings>
                            <value>SOC-HW-VER</value>
                            <value>JTAG-ID</value>
                        </supported_platform_bindings>
                    </platform_bindings>
                    <requires_secondary_software_id>false</requires_secondary_software_id>
                    <requires_feature_id>false</requires_feature_id>
                    <supported_measurement_register_targets>
                        <value>HMR1</value>
                        <value>HMR2</value>
                        <value>FMR1</value>
                        <value>FMR2</value>
                        <value>FMR3</value>
                        <value>FMR4</value>
                    </supported_measurement_register_targets>
                    <supported_oem_lifecycle_states>
                        <value>DEVELOPMENT</value>
                        <value>PRODUCTION</value>
                    </supported_oem_lifecycle_states>
                </supported_oem_signing_features>
                <supported_qti_signing_features>
                    <supports_vouch_for>false</supports_vouch_for>
                    <default_signature_format>ECDSA384</default_signature_format>
                    <signature_formats>
                        <signature_format id="ECDSA384">
                            <signature_algorithm>ECDSA</signature_algorithm>
                            <signature_hash_algorithms>
                                <default_signature_hash_algorithm>SHA384</default_signature_hash_algorithm>
                                <supported_signature_hash_algorithms>
                                    <value>SHA384</value>
                                </supported_signature_hash_algorithms>
                            </signature_hash_algorithms>
                            <ecdsa_curves>
                                <default_ecdsa_curve>SECP384R1</default_ecdsa_curve>
                                <supported_ecdsa_curves>
                                    <value>SECP384R1</value>
                                </supported_ecdsa_curves>
                            </ecdsa_curves>
                        </signature_format>
                    </signature_formats>
                    <serial_bind>
                        <supported>true</supported>
                        <supports_single_serial>true</supports_single_serial>
                        <supports_multi_serials>true</supports_multi_serials>
                    </serial_bind>
                    <debug>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </debug>
                    <uie_key_switch_enable>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </uie_key_switch_enable>
                    <root_revoke_activation_enable>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </root_revoke_activation_enable>
                    <supports_root_revoke_activation_enable_as_combined>false</supports_root_revoke_activation_enable_as_combined>
                    <crash_dump>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </crash_dump>
                    <supports_oem_id_product_id_independent>true</supports_oem_id_product_id_independent>
                    <supports_anti_rollback_version>false</supports_anti_rollback_version>
                    <certificate_chain_depths>
                        <default_certificate_chain_depth>3</default_certificate_chain_depth>
                        <supported_certificate_chain_depths>
                            <value>3</value>
                        </supported_certificate_chain_depths>
                    </certificate_chain_depths>
                    <platform_bindings>
                        <default_platform_bindings>
                            <value>SOC-HW-VER</value>
                            <value>PRODUCT-SEGMENT-ID</value>
                        </default_platform_bindings>
                        <supported_platform_bindings>
                            <value>SOC-HW-VER</value>
                            <value>JTAG-ID</value>
                            <value>SOC-FEATURE-ID</value>
                            <value>PRODUCT-SEGMENT-ID</value>
                        </supported_platform_bindings>
                    </platform_bindings>
                    <requires_secondary_software_id>false</requires_secondary_software_id>
                    <requires_feature_id>false</requires_feature_id>
                    <supported_measurement_register_targets>
                        <value>HMR1</value>
                        <value>HMR2</value>
                        <value>FMR1</value>
                        <value>FMR2</value>
                        <value>FMR3</value>
                        <value>FMR4</value>
                    </supported_measurement_register_targets>
                    <supported_soc_lifecycle_states>
                        <value>OPERATIONAL-EXT</value>
                        <value>OPERATIONAL-INT</value>
                        <value>RMA</value>
                    </supported_soc_lifecycle_states>
                    <supported_oem_lifecycle_states>
                        <value>DEVELOPMENT</value>
                        <value>PRODUCTION</value>
                    </supported_oem_lifecycle_states>
                    <supported_oem_rch_algorithms>
                        <value>SHA384</value>
                    </supported_oem_rch_algorithms>
                </supported_qti_signing_features>
            </authenticator>
            <authenticator id="TME-FW">
                <supported_image_formats>
                    <image_format id="ELF-V7">
                        <file_type>ELF</file_type>
                        <elf_properties>
                            <elf_class>
                                <default_elf_class>32</default_elf_class>
                                <supported_elf_classes>
                                    <value>32</value>
                                    <value>64</value>
                                </supported_elf_classes>
                            </elf_class>
                            <contains_preamble>false</contains_preamble>
                        </elf_properties>
                        <hash_table_segment_properties>
                            <hash_table_segment_placements>
                                <default_hash_table_segment_placement>END</default_hash_table_segment_placement>
                                <supported_hash_table_segment_placements>
                                    <value>ANY</value>
                                </supported_hash_table_segment_placements>
                            </hash_table_segment_placements>
                            <hash_table_segment_alignment>0x1000</hash_table_segment_alignment>
                            <hash_pages>false</hash_pages>
                            <segment_hash_algorithms>
                                <default_segment_hash_algorithm>SHA384</default_segment_hash_algorithm>
                                <supported_segment_hash_algorithms>
                                    <value>SHA384</value>
                                </supported_segment_hash_algorithms>
                            </segment_hash_algorithms>
                            <hash_table_segment_version>7</hash_table_segment_version>
                            <hash_table_segment_metadata_versions>
                                <default_hash_table_segment_metadata_version>3.0</default_hash_table_segment_metadata_version>
                                <supported_hash_table_segment_metadata_versions>
                                    <value>2.0</value>
                                    <value>3.0</value>
                                </supported_hash_table_segment_metadata_versions>
                            </hash_table_segment_metadata_versions>
                            <hash_table_segment_common_metadata_versions>
                                <default_hash_table_segment_common_metadata_version>0.0</default_hash_table_segment_common_metadata_version>
                                <supported_hash_table_segment_common_metadata_versions>
                                    <value>0.0</value>
                                </supported_hash_table_segment_common_metadata_versions>
                            </hash_table_segment_common_metadata_versions>
                        </hash_table_segment_properties>
                    </image_format>
                    <image_format id="ELF-V7-OEM-MISC">
                        <file_type>ELF</file_type>
                        <elf_properties>
                            <elf_class>
                                <default_elf_class>64</default_elf_class>
                                <supported_elf_classes>
                                    <value>64</value>
                                </supported_elf_classes>
                            </elf_class>
                            <contains_preamble>false</contains_preamble>
                        </elf_properties>
                        <hash_table_segment_properties>
                            <hash_table_segment_placements>
                                <default_hash_table_segment_placement>END</default_hash_table_segment_placement>
                                <supported_hash_table_segment_placements>
                                    <value>ANY</value>
                                </supported_hash_table_segment_placements>
                            </hash_table_segment_placements>
                            <hash_table_segment_alignment>0x1000</hash_table_segment_alignment>
                            <hash_pages>false</hash_pages>
                            <segment_hash_algorithms>
                                <default_segment_hash_algorithm>SHA384</default_segment_hash_algorithm>
                                <supported_segment_hash_algorithms>
                                    <value>SHA384</value>
                                </supported_segment_hash_algorithms>
                            </segment_hash_algorithms>
                            <hash_table_segment_version>7</hash_table_segment_version>
                            <hash_table_segment_metadata_versions>
                                <default_hash_table_segment_metadata_version>3.0</default_hash_table_segment_metadata_version>
                                <supported_hash_table_segment_metadata_versions>
                                    <value>2.0</value>
                                    <value>3.0</value>
                                </supported_hash_table_segment_metadata_versions>
                            </hash_table_segment_metadata_versions>
                            <hash_table_segment_common_metadata_versions>
                                <default_hash_table_segment_common_metadata_version>0.0</default_hash_table_segment_common_metadata_version>
                                <supported_hash_table_segment_common_metadata_versions>
                                    <value>0.0</value>
                                </supported_hash_table_segment_common_metadata_versions>
                            </hash_table_segment_common_metadata_versions>
                        </hash_table_segment_properties>
                        <vouch_segment_properties>
                            <vouch_segment_version>0</vouch_segment_version>
                            <max_entry_count>30</max_entry_count>
                            <vouch_segment_hash_algorithms>
                                <default_vouch_segment_hash_algorithm>SHA384</default_vouch_segment_hash_algorithm>
                                <supported_vouch_segment_hash_algorithms>
                                    <value>SHA384</value>
                                </supported_vouch_segment_hash_algorithms>
                            </vouch_segment_hash_algorithms>
                            <phy_addr>0x149FD000</phy_addr>
                            <vouch_segment_placements>
                                <default_vouch_segment_placement>START</default_vouch_segment_placement>
                                <supported_vouch_segment_placements>
                                    <value>START</value>
                                </supported_vouch_segment_placements>
                            </vouch_segment_placements>
                            <vouch_segment_alignment>0x1000</vouch_segment_alignment>
                        </vouch_segment_properties>
                    </image_format>
                    <image_format id="ELF-V7-QTI-MISC">
                        <file_type>ELF</file_type>
                        <elf_properties>
                            <elf_class>
                                <default_elf_class>64</default_elf_class>
                                <supported_elf_classes>
                                    <value>64</value>
                                </supported_elf_classes>
                            </elf_class>
                            <contains_preamble>false</contains_preamble>
                        </elf_properties>
                        <hash_table_segment_properties>
                            <hash_table_segment_placements>
                                <default_hash_table_segment_placement>END</default_hash_table_segment_placement>
                                <supported_hash_table_segment_placements>
                                    <value>ANY</value>
                                </supported_hash_table_segment_placements>
                            </hash_table_segment_placements>
                            <hash_table_segment_alignment>0x1000</hash_table_segment_alignment>
                            <hash_pages>false</hash_pages>
                            <segment_hash_algorithms>
                                <default_segment_hash_algorithm>SHA384</default_segment_hash_algorithm>
                                <supported_segment_hash_algorithms>
                                    <value>SHA384</value>
                                </supported_segment_hash_algorithms>
                            </segment_hash_algorithms>
                            <hash_table_segment_version>7</hash_table_segment_version>
                            <hash_table_segment_metadata_versions>
                                <default_hash_table_segment_metadata_version>3.0</default_hash_table_segment_metadata_version>
                                <supported_hash_table_segment_metadata_versions>
                                    <value>2.0</value>
                                    <value>3.0</value>
                                </supported_hash_table_segment_metadata_versions>
                            </hash_table_segment_metadata_versions>
                            <hash_table_segment_common_metadata_versions>
                                <default_hash_table_segment_common_metadata_version>0.0</default_hash_table_segment_common_metadata_version>
                                <supported_hash_table_segment_common_metadata_versions>
                                    <value>0.0</value>
                                </supported_hash_table_segment_common_metadata_versions>
                            </hash_table_segment_common_metadata_versions>
                        </hash_table_segment_properties>
                        <vouch_segment_properties>
                            <vouch_segment_version>0</vouch_segment_version>
                            <max_entry_count>12</max_entry_count>
                            <vouch_segment_hash_algorithms>
                                <default_vouch_segment_hash_algorithm>SHA384</default_vouch_segment_hash_algorithm>
                                <supported_vouch_segment_hash_algorithms>
                                    <value>SHA384</value>
                                </supported_vouch_segment_hash_algorithms>
                            </vouch_segment_hash_algorithms>
                            <phy_addr>0x149FD000</phy_addr>
                            <vouch_segment_placements>
                                <default_vouch_segment_placement>START</default_vouch_segment_placement>
                                <supported_vouch_segment_placements>
                                    <value>START</value>
                                </supported_vouch_segment_placements>
                            </vouch_segment_placements>
                            <vouch_segment_alignment>0x1000</vouch_segment_alignment>
                        </vouch_segment_properties>
                    </image_format>
                </supported_image_formats>
                <default_image_format>ELF-V7</default_image_format>
                <supported_oem_signing_features>
                    <supports_vouch_for>true</supports_vouch_for>
                    <default_signature_format>ECDSA384</default_signature_format>
                    <signature_formats>
                        <signature_format id="ECDSA384">
                            <signature_algorithm>ECDSA</signature_algorithm>
                            <signature_hash_algorithms>
                                <default_signature_hash_algorithm>SHA384</default_signature_hash_algorithm>
                                <supported_signature_hash_algorithms>
                                    <value>SHA384</value>
                                </supported_signature_hash_algorithms>
                            </signature_hash_algorithms>
                            <ecdsa_curves>
                                <default_ecdsa_curve>SECP384R1</default_ecdsa_curve>
                                <supported_ecdsa_curves>
                                    <value>SECP384R1</value>
                                </supported_ecdsa_curves>
                            </ecdsa_curves>
                        </signature_format>
                    </signature_formats>
                    <serial_bind>
                        <supported>true</supported>
                        <supports_single_serial>true</supports_single_serial>
                        <supports_multi_serials>true</supports_multi_serials>
                    </serial_bind>
                    <debug>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </debug>
                    <uie_key_switch_enable>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </uie_key_switch_enable>
                    <root_revoke_activation_enable>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </root_revoke_activation_enable>
                    <supports_root_revoke_activation_enable_as_combined>false</supports_root_revoke_activation_enable_as_combined>
                    <crash_dump>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </crash_dump>
                    <supports_oem_id_product_id_independent>true</supports_oem_id_product_id_independent>
                    <supports_anti_rollback_version>true</supports_anti_rollback_version>
                    <mrc_specs>
                        <default_mrc_spec>2.0</default_mrc_spec>
                        <supported_mrc_specs>
                            <value>2.0</value>
                        </supported_mrc_specs>
                    </mrc_specs>
                    <certificate_chain_depths>
                        <default_certificate_chain_depth>3</default_certificate_chain_depth>
                        <supported_certificate_chain_depths>
                            <value>2</value>
                            <value>3</value>
                        </supported_certificate_chain_depths>
                    </certificate_chain_depths>
                    <platform_bindings>
                        <default_platform_bindings>
                            <value>SOC-HW-VER</value>
                        </default_platform_bindings>
                        <supported_platform_bindings>
                            <value>SOC-HW-VER</value>
                            <value>JTAG-ID</value>
                        </supported_platform_bindings>
                    </platform_bindings>
                    <requires_secondary_software_id>false</requires_secondary_software_id>
                    <requires_feature_id>false</requires_feature_id>
                    <supported_measurement_register_targets>
                        <value>HMR1</value>
                        <value>HMR2</value>
                        <value>FMR1</value>
                        <value>FMR2</value>
                        <value>FMR3</value>
                        <value>FMR4</value>
                    </supported_measurement_register_targets>
                    <supported_oem_lifecycle_states>
                        <value>DEVELOPMENT</value>
                        <value>PRODUCTION</value>
                    </supported_oem_lifecycle_states>
                </supported_oem_signing_features>
                <supported_qti_signing_features>
                    <supports_vouch_for>true</supports_vouch_for>
                    <default_signature_format>ECDSA384</default_signature_format>
                    <signature_formats>
                        <signature_format id="ECDSA384">
                            <signature_algorithm>ECDSA</signature_algorithm>
                            <signature_hash_algorithms>
                                <default_signature_hash_algorithm>SHA384</default_signature_hash_algorithm>
                                <supported_signature_hash_algorithms>
                                    <value>SHA384</value>
                                </supported_signature_hash_algorithms>
                            </signature_hash_algorithms>
                            <ecdsa_curves>
                                <default_ecdsa_curve>SECP384R1</default_ecdsa_curve>
                                <supported_ecdsa_curves>
                                    <value>SECP384R1</value>
                                </supported_ecdsa_curves>
                            </ecdsa_curves>
                        </signature_format>
                    </signature_formats>
                    <serial_bind>
                        <supported>true</supported>
                        <supports_single_serial>true</supports_single_serial>
                        <supports_multi_serials>true</supports_multi_serials>
                    </serial_bind>
                    <debug>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </debug>
                    <uie_key_switch_enable>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </uie_key_switch_enable>
                    <root_revoke_activation_enable>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </root_revoke_activation_enable>
                    <supports_root_revoke_activation_enable_as_combined>false</supports_root_revoke_activation_enable_as_combined>
                    <crash_dump>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </crash_dump>
                    <supports_oem_id_product_id_independent>true</supports_oem_id_product_id_independent>
                    <supports_anti_rollback_version>false</supports_anti_rollback_version>
                    <certificate_chain_depths>
                        <default_certificate_chain_depth>3</default_certificate_chain_depth>
                        <supported_certificate_chain_depths>
                            <value>3</value>
                        </supported_certificate_chain_depths>
                    </certificate_chain_depths>
                    <platform_bindings>
                        <default_platform_bindings>
                            <value>SOC-HW-VER</value>
                            <value>PRODUCT-SEGMENT-ID</value>
                        </default_platform_bindings>
                        <supported_platform_bindings>
                            <value>SOC-HW-VER</value>
                            <value>JTAG-ID</value>
                            <value>SOC-FEATURE-ID</value>
                            <value>PRODUCT-SEGMENT-ID</value>
                        </supported_platform_bindings>
                    </platform_bindings>
                    <requires_secondary_software_id>false</requires_secondary_software_id>
                    <requires_feature_id>false</requires_feature_id>
                    <supported_measurement_register_targets>
                        <value>HMR1</value>
                        <value>HMR2</value>
                        <value>FMR1</value>
                        <value>FMR2</value>
                        <value>FMR3</value>
                        <value>FMR4</value>
                    </supported_measurement_register_targets>
                    <supported_soc_lifecycle_states>
                        <value>OPERATIONAL-EXT</value>
                        <value>OPERATIONAL-INT</value>
                        <value>RMA</value>
                    </supported_soc_lifecycle_states>
                    <supported_oem_lifecycle_states>
                        <value>DEVELOPMENT</value>
                        <value>PRODUCTION</value>
                    </supported_oem_lifecycle_states>
                    <supported_oem_rch_algorithms>
                        <value>SHA384</value>
                    </supported_oem_rch_algorithms>
                </supported_qti_signing_features>
                <supported_oem_encryption_features>
                    <default_encryption_format>QBEC-GCM</default_encryption_format>
                    <supported_encryption_formats>
                        <encryption_format id="QBEC-GCM">
                            <encryption_type>QBEC</encryption_type>
                            <version>1</version>
                            <key_management_scheme>ECDH-P384-HKDF-SIV-GCM</key_management_scheme>
                            <key_management_feature>MODEM-IMAGE</key_management_feature>
                            <data_encryption_scheme>ELF-SEGMENT-AES-GCM</data_encryption_scheme>
                            <max_num_public_keys>4</max_num_public_keys>
                        </encryption_format>
                    </supported_encryption_formats>
                </supported_oem_encryption_features>
            </authenticator>
            <authenticator id="TZ-PIL">
                <supported_image_formats>
                    <image_format id="ELF-V7">
                        <file_type>ELF</file_type>
                        <elf_properties>
                            <elf_class>
                                <default_elf_class>32</default_elf_class>
                                <supported_elf_classes>
                                    <value>32</value>
                                    <value>64</value>
                                </supported_elf_classes>
                            </elf_class>
                            <contains_preamble>false</contains_preamble>
                        </elf_properties>
                        <hash_table_segment_properties>
                            <hash_table_segment_placements>
                                <default_hash_table_segment_placement>END</default_hash_table_segment_placement>
                                <supported_hash_table_segment_placements>
                                    <value>ANY</value>
                                </supported_hash_table_segment_placements>
                            </hash_table_segment_placements>
                            <hash_table_segment_alignment>0x1000</hash_table_segment_alignment>
                            <hash_pages>false</hash_pages>
                            <segment_hash_algorithms>
                                <default_segment_hash_algorithm>SHA384</default_segment_hash_algorithm>
                                <supported_segment_hash_algorithms>
                                    <value>SHA384</value>
                                </supported_segment_hash_algorithms>
                            </segment_hash_algorithms>
                            <hash_table_segment_version>7</hash_table_segment_version>
                            <hash_table_segment_metadata_versions>
                                <default_hash_table_segment_metadata_version>3.0</default_hash_table_segment_metadata_version>
                                <supported_hash_table_segment_metadata_versions>
                                    <value>2.0</value>
                                    <value>3.0</value>
                                </supported_hash_table_segment_metadata_versions>
                            </hash_table_segment_metadata_versions>
                            <hash_table_segment_common_metadata_versions>
                                <default_hash_table_segment_common_metadata_version>0.0</default_hash_table_segment_common_metadata_version>
                                <supported_hash_table_segment_common_metadata_versions>
                                    <value>0.0</value>
                                </supported_hash_table_segment_common_metadata_versions>
                            </hash_table_segment_common_metadata_versions>
                        </hash_table_segment_properties>
                    </image_format>
                </supported_image_formats>
                <default_image_format>ELF-V7</default_image_format>
                <supported_oem_signing_features>
                    <supports_vouch_for>true</supports_vouch_for>
                    <default_signature_format>ECDSA384</default_signature_format>
                    <signature_formats>
                        <signature_format id="ECDSA384">
                            <signature_algorithm>ECDSA</signature_algorithm>
                            <signature_hash_algorithms>
                                <default_signature_hash_algorithm>SHA384</default_signature_hash_algorithm>
                                <supported_signature_hash_algorithms>
                                    <value>SHA384</value>
                                </supported_signature_hash_algorithms>
                            </signature_hash_algorithms>
                            <ecdsa_curves>
                                <default_ecdsa_curve>SECP384R1</default_ecdsa_curve>
                                <supported_ecdsa_curves>
                                    <value>SECP384R1</value>
                                </supported_ecdsa_curves>
                            </ecdsa_curves>
                        </signature_format>
                    </signature_formats>
                    <serial_bind>
                        <supported>true</supported>
                        <supports_single_serial>true</supports_single_serial>
                        <supports_multi_serials>true</supports_multi_serials>
                    </serial_bind>
                    <debug>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </debug>
                    <uie_key_switch_enable>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </uie_key_switch_enable>
                    <root_revoke_activation_enable>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </root_revoke_activation_enable>
                    <supports_root_revoke_activation_enable_as_combined>false</supports_root_revoke_activation_enable_as_combined>
                    <crash_dump>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </crash_dump>
                    <supports_oem_id_product_id_independent>true</supports_oem_id_product_id_independent>
                    <supports_anti_rollback_version>true</supports_anti_rollback_version>
                    <mrc_specs>
                        <default_mrc_spec>2.0</default_mrc_spec>
                        <supported_mrc_specs>
                            <value>2.0</value>
                        </supported_mrc_specs>
                    </mrc_specs>
                    <certificate_chain_depths>
                        <default_certificate_chain_depth>3</default_certificate_chain_depth>
                        <supported_certificate_chain_depths>
                            <value>2</value>
                            <value>3</value>
                        </supported_certificate_chain_depths>
                    </certificate_chain_depths>
                    <platform_bindings>
                        <default_platform_bindings>
                            <value>SOC-HW-VER</value>
                        </default_platform_bindings>
                        <supported_platform_bindings>
                            <value>SOC-HW-VER</value>
                            <value>JTAG-ID</value>
                        </supported_platform_bindings>
                    </platform_bindings>
                    <requires_secondary_software_id>false</requires_secondary_software_id>
                    <requires_feature_id>false</requires_feature_id>
                    <supported_oem_lifecycle_states>
                        <value>DEVELOPMENT</value>
                        <value>PRODUCTION</value>
                    </supported_oem_lifecycle_states>
                </supported_oem_signing_features>
                <supported_qti_signing_features>
                    <supports_vouch_for>true</supports_vouch_for>
                    <default_signature_format>ECDSA384</default_signature_format>
                    <signature_formats>
                        <signature_format id="ECDSA384">
                            <signature_algorithm>ECDSA</signature_algorithm>
                            <signature_hash_algorithms>
                                <default_signature_hash_algorithm>SHA384</default_signature_hash_algorithm>
                                <supported_signature_hash_algorithms>
                                    <value>SHA384</value>
                                </supported_signature_hash_algorithms>
                            </signature_hash_algorithms>
                            <ecdsa_curves>
                                <default_ecdsa_curve>SECP384R1</default_ecdsa_curve>
                                <supported_ecdsa_curves>
                                    <value>SECP384R1</value>
                                </supported_ecdsa_curves>
                            </ecdsa_curves>
                        </signature_format>
                    </signature_formats>
                    <serial_bind>
                        <supported>true</supported>
                        <supports_single_serial>true</supports_single_serial>
                        <supports_multi_serials>true</supports_multi_serials>
                    </serial_bind>
                    <debug>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </debug>
                    <uie_key_switch_enable>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </uie_key_switch_enable>
                    <root_revoke_activation_enable>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </root_revoke_activation_enable>
                    <supports_root_revoke_activation_enable_as_combined>false</supports_root_revoke_activation_enable_as_combined>
                    <crash_dump>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </crash_dump>
                    <supports_oem_id_product_id_independent>true</supports_oem_id_product_id_independent>
                    <supports_anti_rollback_version>false</supports_anti_rollback_version>
                    <certificate_chain_depths>
                        <default_certificate_chain_depth>3</default_certificate_chain_depth>
                        <supported_certificate_chain_depths>
                            <value>3</value>
                        </supported_certificate_chain_depths>
                    </certificate_chain_depths>
                    <platform_bindings>
                        <default_platform_bindings>
                            <value>SOC-HW-VER</value>
                            <value>PRODUCT-SEGMENT-ID</value>
                        </default_platform_bindings>
                        <supported_platform_bindings>
                            <value>SOC-HW-VER</value>
                            <value>JTAG-ID</value>
                            <value>SOC-FEATURE-ID</value>
                            <value>PRODUCT-SEGMENT-ID</value>
                        </supported_platform_bindings>
                    </platform_bindings>
                    <requires_secondary_software_id>false</requires_secondary_software_id>
                    <requires_feature_id>false</requires_feature_id>
                    <supported_measurement_register_targets>
                        <value>HMR1</value>
                        <value>HMR2</value>
                        <value>FMR1</value>
                        <value>FMR2</value>
                        <value>FMR3</value>
                        <value>FMR4</value>
                    </supported_measurement_register_targets>
                    <supported_soc_lifecycle_states>
                        <value>RMA</value>
                        <value>OPERATIONAL-EXT</value>
                        <value>OPERATIONAL-INT</value>
                    </supported_soc_lifecycle_states>
                    <supported_oem_lifecycle_states>
                        <value>DEVELOPMENT</value>
                        <value>PRODUCTION</value>
                    </supported_oem_lifecycle_states>
                    <supported_oem_rch_algorithms>
                        <value>SHA384</value>
                    </supported_oem_rch_algorithms>
                </supported_qti_signing_features>
            </authenticator>
            <authenticator id="TA-LOADER">
                <supported_image_formats>
                    <image_format id="ELF-V7">
                        <file_type>ELF</file_type>
                        <elf_properties>
                            <elf_class>
                                <default_elf_class>32</default_elf_class>
                                <supported_elf_classes>
                                    <value>32</value>
                                    <value>64</value>
                                </supported_elf_classes>
                            </elf_class>
                            <contains_preamble>false</contains_preamble>
                        </elf_properties>
                        <hash_table_segment_properties>
                            <hash_table_segment_placements>
                                <default_hash_table_segment_placement>END</default_hash_table_segment_placement>
                                <supported_hash_table_segment_placements>
                                    <value>ANY</value>
                                </supported_hash_table_segment_placements>
                            </hash_table_segment_placements>
                            <hash_table_segment_alignment>0x1000</hash_table_segment_alignment>
                            <hash_pages>false</hash_pages>
                            <segment_hash_algorithms>
                                <default_segment_hash_algorithm>SHA384</default_segment_hash_algorithm>
                                <supported_segment_hash_algorithms>
                                    <value>SHA384</value>
                                </supported_segment_hash_algorithms>
                            </segment_hash_algorithms>
                            <hash_table_segment_version>7</hash_table_segment_version>
                            <hash_table_segment_metadata_versions>
                                <default_hash_table_segment_metadata_version>3.0</default_hash_table_segment_metadata_version>
                                <supported_hash_table_segment_metadata_versions>
                                    <value>2.0</value>
                                    <value>3.0</value>
                                </supported_hash_table_segment_metadata_versions>
                            </hash_table_segment_metadata_versions>
                            <hash_table_segment_common_metadata_versions>
                                <default_hash_table_segment_common_metadata_version>0.0</default_hash_table_segment_common_metadata_version>
                                <supported_hash_table_segment_common_metadata_versions>
                                    <value>0.0</value>
                                </supported_hash_table_segment_common_metadata_versions>
                            </hash_table_segment_common_metadata_versions>
                        </hash_table_segment_properties>
                    </image_format>
                    <image_format id="ELF-V6">
                        <file_type>ELF</file_type>
                        <elf_properties>
                            <elf_class>
                                <default_elf_class>32</default_elf_class>
                                <supported_elf_classes>
                                    <value>32</value>
                                    <value>64</value>
                                </supported_elf_classes>
                            </elf_class>
                            <contains_preamble>false</contains_preamble>
                        </elf_properties>
                        <hash_table_segment_properties>
                            <hash_table_segment_placements>
                                <default_hash_table_segment_placement>END</default_hash_table_segment_placement>
                                <supported_hash_table_segment_placements>
                                    <value>ANY</value>
                                </supported_hash_table_segment_placements>
                            </hash_table_segment_placements>
                            <hash_table_segment_alignment>0x1000</hash_table_segment_alignment>
                            <hash_pages>false</hash_pages>
                            <segment_hash_algorithms>
                                <default_segment_hash_algorithm>SHA384</default_segment_hash_algorithm>
                                <supported_segment_hash_algorithms>
                                    <value>SHA384</value>
                                </supported_segment_hash_algorithms>
                            </segment_hash_algorithms>
                            <hash_table_segment_version>6</hash_table_segment_version>
                            <hash_table_segment_metadata_versions>
                                <default_hash_table_segment_metadata_version>1.0</default_hash_table_segment_metadata_version>
                                <supported_hash_table_segment_metadata_versions>
                                    <value>0.0</value>
                                    <value>1.0</value>
                                </supported_hash_table_segment_metadata_versions>
                            </hash_table_segment_metadata_versions>
                        </hash_table_segment_properties>
                    </image_format>
                </supported_image_formats>
                <default_image_format>ELF-V7</default_image_format>
                <supported_oem_signing_features>
                    <supports_vouch_for>false</supports_vouch_for>
                    <default_signature_format>ECDSA384</default_signature_format>
                    <signature_formats>
                        <signature_format id="ECDSA384">
                            <signature_algorithm>ECDSA</signature_algorithm>
                            <signature_hash_algorithms>
                                <default_signature_hash_algorithm>SHA384</default_signature_hash_algorithm>
                                <supported_signature_hash_algorithms>
                                    <value>SHA384</value>
                                </supported_signature_hash_algorithms>
                            </signature_hash_algorithms>
                            <ecdsa_curves>
                                <default_ecdsa_curve>SECP384R1</default_ecdsa_curve>
                                <supported_ecdsa_curves>
                                    <value>SECP384R1</value>
                                </supported_ecdsa_curves>
                            </ecdsa_curves>
                        </signature_format>
                    </signature_formats>
                    <serial_bind>
                        <supported>true</supported>
                        <supports_single_serial>true</supports_single_serial>
                        <supports_multi_serials>true</supports_multi_serials>
                    </serial_bind>
                    <debug>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </debug>
                    <uie_key_switch_enable>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </uie_key_switch_enable>
                    <root_revoke_activation_enable>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </root_revoke_activation_enable>
                    <supports_root_revoke_activation_enable_as_combined>false</supports_root_revoke_activation_enable_as_combined>
                    <crash_dump>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </crash_dump>
                    <supports_oem_id_product_id_independent>true</supports_oem_id_product_id_independent>
                    <supports_anti_rollback_version>true</supports_anti_rollback_version>
                    <mrc_specs>
                        <default_mrc_spec>2.0</default_mrc_spec>
                        <supported_mrc_specs>
                            <value>2.0</value>
                        </supported_mrc_specs>
                    </mrc_specs>
                    <certificate_chain_depths>
                        <default_certificate_chain_depth>3</default_certificate_chain_depth>
                        <supported_certificate_chain_depths>
                            <value>2</value>
                            <value>3</value>
                        </supported_certificate_chain_depths>
                    </certificate_chain_depths>
                    <platform_bindings>
                        <default_platform_bindings>
                            <value>SOC-HW-VER</value>
                        </default_platform_bindings>
                        <supported_platform_bindings>
                            <value>SOC-HW-VER</value>
                            <value>JTAG-ID</value>
                            <value>INDEPENDENT</value>
                        </supported_platform_bindings>
                    </platform_bindings>
                    <requires_secondary_software_id>false</requires_secondary_software_id>
                    <requires_feature_id>false</requires_feature_id>
                    <supported_oem_lifecycle_states>
                        <value>DEVELOPMENT</value>
                        <value>PRODUCTION</value>
                    </supported_oem_lifecycle_states>
                </supported_oem_signing_features>
                <supported_qti_signing_features>
                    <supports_vouch_for>false</supports_vouch_for>
                    <default_signature_format>ECDSA384</default_signature_format>
                    <signature_formats>
                        <signature_format id="ECDSA384">
                            <signature_algorithm>ECDSA</signature_algorithm>
                            <signature_hash_algorithms>
                                <default_signature_hash_algorithm>SHA384</default_signature_hash_algorithm>
                                <supported_signature_hash_algorithms>
                                    <value>SHA384</value>
                                </supported_signature_hash_algorithms>
                            </signature_hash_algorithms>
                            <ecdsa_curves>
                                <default_ecdsa_curve>SECP384R1</default_ecdsa_curve>
                                <supported_ecdsa_curves>
                                    <value>SECP384R1</value>
                                </supported_ecdsa_curves>
                            </ecdsa_curves>
                        </signature_format>
                    </signature_formats>
                    <serial_bind>
                        <supported>true</supported>
                        <supports_single_serial>true</supports_single_serial>
                        <supports_multi_serials>true</supports_multi_serials>
                    </serial_bind>
                    <debug>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </debug>
                    <uie_key_switch_enable>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </uie_key_switch_enable>
                    <root_revoke_activation_enable>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </root_revoke_activation_enable>
                    <supports_root_revoke_activation_enable_as_combined>false</supports_root_revoke_activation_enable_as_combined>
                    <crash_dump>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </crash_dump>
                    <supports_oem_id_product_id_independent>true</supports_oem_id_product_id_independent>
                    <supports_anti_rollback_version>false</supports_anti_rollback_version>
                    <certificate_chain_depths>
                        <default_certificate_chain_depth>3</default_certificate_chain_depth>
                        <supported_certificate_chain_depths>
                            <value>3</value>
                        </supported_certificate_chain_depths>
                    </certificate_chain_depths>
                    <platform_bindings>
                        <default_platform_bindings>
                            <value>SOC-HW-VER</value>
                            <value>PRODUCT-SEGMENT-ID</value>
                        </default_platform_bindings>
                        <supported_platform_bindings>
                            <value>SOC-HW-VER</value>
                            <value>JTAG-ID</value>
                            <value>SOC-FEATURE-ID</value>
                            <value>PRODUCT-SEGMENT-ID</value>
                        </supported_platform_bindings>
                    </platform_bindings>
                    <requires_secondary_software_id>false</requires_secondary_software_id>
                    <requires_feature_id>false</requires_feature_id>
                    <supported_measurement_register_targets>
                        <value>HMR1</value>
                        <value>HMR2</value>
                        <value>FMR1</value>
                        <value>FMR2</value>
                        <value>FMR3</value>
                        <value>FMR4</value>
                    </supported_measurement_register_targets>
                    <supported_soc_lifecycle_states>
                        <value>RMA</value>
                        <value>OPERATIONAL-EXT</value>
                        <value>OPERATIONAL-INT</value>
                    </supported_soc_lifecycle_states>
                    <supported_oem_lifecycle_states>
                        <value>DEVELOPMENT</value>
                        <value>PRODUCTION</value>
                    </supported_oem_lifecycle_states>
                    <supported_oem_rch_algorithms>
                        <value>SHA384</value>
                    </supported_oem_rch_algorithms>
                </supported_qti_signing_features>
            </authenticator>
            <authenticator id="MODEM">
                <supported_image_formats>
                    <image_format id="ELF-V7">
                        <file_type>ELF</file_type>
                        <elf_properties>
                            <elf_class>
                                <default_elf_class>32</default_elf_class>
                                <supported_elf_classes>
                                    <value>32</value>
                                    <value>64</value>
                                </supported_elf_classes>
                            </elf_class>
                            <contains_preamble>false</contains_preamble>
                        </elf_properties>
                        <hash_table_segment_properties>
                            <hash_table_segment_placements>
                                <default_hash_table_segment_placement>START</default_hash_table_segment_placement>
                                <supported_hash_table_segment_placements>
                                    <value>START</value>
                                </supported_hash_table_segment_placements>
                            </hash_table_segment_placements>
                            <hash_table_segment_alignment>0x1000</hash_table_segment_alignment>
                            <hash_pages>false</hash_pages>
                            <segment_hash_algorithms>
                                <default_segment_hash_algorithm>SHA384</default_segment_hash_algorithm>
                                <supported_segment_hash_algorithms>
                                    <value>SHA384</value>
                                </supported_segment_hash_algorithms>
                            </segment_hash_algorithms>
                            <hash_table_segment_version>7</hash_table_segment_version>
                            <hash_table_segment_metadata_versions>
                                <default_hash_table_segment_metadata_version>2.0</default_hash_table_segment_metadata_version>
                                <supported_hash_table_segment_metadata_versions>
                                    <value>2.0</value>
                                </supported_hash_table_segment_metadata_versions>
                            </hash_table_segment_metadata_versions>
                            <hash_table_segment_common_metadata_versions>
                                <default_hash_table_segment_common_metadata_version>0.0</default_hash_table_segment_common_metadata_version>
                                <supported_hash_table_segment_common_metadata_versions>
                                    <value>0.0</value>
                                </supported_hash_table_segment_common_metadata_versions>
                            </hash_table_segment_common_metadata_versions>
                        </hash_table_segment_properties>
                    </image_format>
                    <image_format id="ELF-V7-EFS-TAR">
                        <file_type>ELF</file_type>
                        <elf_properties>
                            <elf_class>
                                <default_elf_class>32</default_elf_class>
                                <supported_elf_classes>
                                    <value>32</value>
                                    <value>64</value>
                                </supported_elf_classes>
                            </elf_class>
                            <contains_preamble>false</contains_preamble>
                        </elf_properties>
                        <hash_table_segment_properties>
                            <hash_table_segment_placements>
                                <default_hash_table_segment_placement>START</default_hash_table_segment_placement>
                                <supported_hash_table_segment_placements>
                                    <value>START</value>
                                </supported_hash_table_segment_placements>
                            </hash_table_segment_placements>
                            <hash_table_segment_alignment>0x4</hash_table_segment_alignment>
                            <hash_pages>false</hash_pages>
                            <segment_hash_algorithms>
                                <default_segment_hash_algorithm>SHA384</default_segment_hash_algorithm>
                                <supported_segment_hash_algorithms>
                                    <value>SHA384</value>
                                </supported_segment_hash_algorithms>
                            </segment_hash_algorithms>
                            <hash_table_segment_version>7</hash_table_segment_version>
                            <hash_table_segment_metadata_versions>
                                <default_hash_table_segment_metadata_version>2.0</default_hash_table_segment_metadata_version>
                                <supported_hash_table_segment_metadata_versions>
                                    <value>2.0</value>
                                </supported_hash_table_segment_metadata_versions>
                            </hash_table_segment_metadata_versions>
                            <hash_table_segment_common_metadata_versions>
                                <default_hash_table_segment_common_metadata_version>0.0</default_hash_table_segment_common_metadata_version>
                                <supported_hash_table_segment_common_metadata_versions>
                                    <value>0.0</value>
                                </supported_hash_table_segment_common_metadata_versions>
                            </hash_table_segment_common_metadata_versions>
                        </hash_table_segment_properties>
                    </image_format>
                </supported_image_formats>
                <default_image_format>ELF-V7</default_image_format>
                <supported_oem_signing_features>
                    <supports_vouch_for>false</supports_vouch_for>
                    <default_signature_format>ECDSA384</default_signature_format>
                    <signature_formats>
                        <signature_format id="ECDSA384">
                            <signature_algorithm>ECDSA</signature_algorithm>
                            <signature_hash_algorithms>
                                <default_signature_hash_algorithm>SHA384</default_signature_hash_algorithm>
                                <supported_signature_hash_algorithms>
                                    <value>SHA384</value>
                                </supported_signature_hash_algorithms>
                            </signature_hash_algorithms>
                            <ecdsa_curves>
                                <default_ecdsa_curve>SECP384R1</default_ecdsa_curve>
                                <supported_ecdsa_curves>
                                    <value>SECP384R1</value>
                                </supported_ecdsa_curves>
                            </ecdsa_curves>
                        </signature_format>
                    </signature_formats>
                    <serial_bind>
                        <supported>true</supported>
                        <supports_single_serial>true</supports_single_serial>
                        <supports_multi_serials>true</supports_multi_serials>
                    </serial_bind>
                    <debug>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </debug>
                    <uie_key_switch_enable>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </uie_key_switch_enable>
                    <root_revoke_activation_enable>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </root_revoke_activation_enable>
                    <supports_root_revoke_activation_enable_as_combined>false</supports_root_revoke_activation_enable_as_combined>
                    <crash_dump>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </crash_dump>
                    <supports_oem_id_product_id_independent>true</supports_oem_id_product_id_independent>
                    <supports_anti_rollback_version>true</supports_anti_rollback_version>
                    <mrc_specs>
                        <default_mrc_spec>2.0</default_mrc_spec>
                        <supported_mrc_specs>
                            <value>2.0</value>
                        </supported_mrc_specs>
                    </mrc_specs>
                    <certificate_chain_depths>
                        <default_certificate_chain_depth>3</default_certificate_chain_depth>
                        <supported_certificate_chain_depths>
                            <value>2</value>
                            <value>3</value>
                        </supported_certificate_chain_depths>
                    </certificate_chain_depths>
                    <platform_bindings>
                        <default_platform_bindings>
                            <value>SOC-HW-VER</value>
                        </default_platform_bindings>
                        <supported_platform_bindings>
                            <value>SOC-HW-VER</value>
                            <value>JTAG-ID</value>
                        </supported_platform_bindings>
                    </platform_bindings>
                    <requires_secondary_software_id>false</requires_secondary_software_id>
                    <requires_feature_id>false</requires_feature_id>
                    <supported_oem_lifecycle_states>
                        <value>DEVELOPMENT</value>
                        <value>PRODUCTION</value>
                    </supported_oem_lifecycle_states>
                </supported_oem_signing_features>
            </authenticator>
        </authenticators>
    </authentication>
    <debugging>
        <tme>
            <image_id>DEBUG-POLICY</image_id>
            <tme_version>1</tme_version>
            <oem_debug_policy_format>ELF</oem_debug_policy_format>
            <tme_elf_properties>
                <phy_addr>0x149FD000</phy_addr>
                <elf_classes>
                    <default_elf_class>32</default_elf_class>
                    <supported_elf_classes>
                        <value>32</value>
                        <value>64</value>
                    </supported_elf_classes>
                </elf_classes>
                <dpr_segment_placements>
                    <default_dpr_segment_placement>START</default_dpr_segment_placement>
                    <supported_dpr_segment_placements>
                        <value>ANY</value>
                    </supported_dpr_segment_placements>
                </dpr_segment_placements>
                <dpr_segment_alignment>0x1000</dpr_segment_alignment>
            </tme_elf_properties>
            <command_version>1.1</command_version>
            <seq_signing_algorithms>
                <default_seq_signing_algorithm>ECDSA_P521_SHA512</default_seq_signing_algorithm>
                <supported_seq_signing_algorithms>
                    <value>ECDSA_P384_SHA384</value>
                    <value>ECDSA_P521_SHA512</value>
                </supported_seq_signing_algorithms>
            </seq_signing_algorithms>
            <test_signed_image_hash_algorithms>
                <default_test_signed_image_hash_algorithm>SHA384</default_test_signed_image_hash_algorithm>
                <supported_test_signed_image_hash_algorithms>
                    <value>SHA384</value>
                    <value>SHA512</value>
                </supported_test_signed_image_hash_algorithms>
            </test_signed_image_hash_algorithms>
            <seq_test_signed_image_hash_algorithms>
                <default_test_signed_image_hash_algorithm>SHA384</default_test_signed_image_hash_algorithm>
                <supported_test_signed_image_hash_algorithms>
                    <value>SHA384</value>
                    <value>SHA512</value>
                </supported_test_signed_image_hash_algorithms>
            </seq_test_signed_image_hash_algorithms>
            <fingerprint_hash_algorithms>
                <default_fingerprint_hash_algorithm>SHA384</default_fingerprint_hash_algorithm>
                <supported_fingerprint_hash_algorithms>
                    <value>SHA384</value>
                    <value>SHA512</value>
                </supported_fingerprint_hash_algorithms>
            </fingerprint_hash_algorithms>
            <supported_oem_rch_algorithms>
                <value>SHA384</value>
            </supported_oem_rch_algorithms>
            <supported_oem_crash_dump_curves>
                <value>SECP384R1</value>
            </supported_oem_crash_dump_curves>
            <debug_vector>
                <debug_vector_option id="SECURE_BOOT_DISABLE">
                    <bit>2</bit>
                    <description>Enable SECURE_BOOT_DISABLE feature.</description>
                </debug_vector_option>
                <debug_vector_option id="WPSS_DBGEN">
                    <bit>4</bit>
                    <description>Enable WPSS_DBGEN (WPSS/WLAN Invasive Debug).</description>
                </debug_vector_option>
                <debug_vector_option id="WPSS_NIDEN">
                    <bit>5</bit>
                    <description>Enable WPSS_NIDEN (WPSS/WLAN Non-Invasive Debug).</description>
                </debug_vector_option>
                <debug_vector_option id="TIC_REENABLE">
                    <bit>6</bit>
                    <description>Enable TIC_REENABLE feature.</description>
                </debug_vector_option>
                <debug_vector_option id="MVMSS_DBGEN">
                    <bit>7</bit>
                    <description>Enable MVMSS_DBGEN (MVMSS Invasive Debug).</description>
                </debug_vector_option>
                <debug_vector_option id="MVMSS_NIDEN">
                    <bit>8</bit>
                    <description>Enable MVMSS_NIDEN (MVMSS Non-Invasive Debug).</description>
                </debug_vector_option>
                <debug_vector_option id="DDR_I_MC4">
                    <bit>9</bit>
                    <description>Enable DDR_I_MC4 feature.</description>
                </debug_vector_option>
                <debug_vector_option id="DDR_I_MC5">
                    <bit>10</bit>
                    <description>Enable DDR_I_MC5 feature.</description>
                </debug_vector_option>
                <debug_vector_option id="TMEROM_DBGEN">
                    <bit>11</bit>
                    <description>Enable TMEROM_DBGEN (TMEROM Invasive Debug).</description>
                </debug_vector_option>
                <debug_vector_option id="TMEROM_NIDEN">
                    <bit>12</bit>
                    <description>Enable TMEROM_NIDEN (TMEROM Non-Invasive Debug).</description>
                </debug_vector_option>
                <debug_vector_option id="TMERAM_DBGEN">
                    <bit>13</bit>
                    <description>Enable TMERAM_DBGEN (TMERAM Invasive Debug).</description>
                </debug_vector_option>
                <debug_vector_option id="TMERAM_NIDEN">
                    <bit>14</bit>
                    <description>Enable TMERAM_NIDEN (TMERAM Non-Invasive Debug).</description>
                </debug_vector_option>
                <debug_vector_option id="AOP_DBGEN">
                    <bit>15</bit>
                    <description>Enable AOP_DBGEN (AOP Invasive Debug).</description>
                </debug_vector_option>
                <debug_vector_option id="AOP_NIDEN">
                    <bit>16</bit>
                    <description>Enable AOP_NIDEN (AOP Non-Invasive Debug).</description>
                </debug_vector_option>
                <debug_vector_option id="SHRM_DBGEN">
                    <bit>17</bit>
                    <description>Enable SHRM_DBGEN (SHRM Invasive Debug).</description>
                </debug_vector_option>
                <debug_vector_option id="QSEE_DBGEN">
                    <bit>23</bit>
                    <description>Enable QSEE_DBGEN (QSEE/TZ/APPS Secure Invasive Debug).</description>
                </debug_vector_option>
                <debug_vector_option id="QSEE_NIDEN">
                    <bit>24</bit>
                    <description>Enable QSEE_NIDEN (QSEE/TZ/APPS Secure Non-Invasive Debug).</description>
                </debug_vector_option>
                <debug_vector_option id="APB2JTAG_REENABLE">
                    <bit>27</bit>
                    <description>Enable APB2JTAG_REENABLE feature.</description>
                </debug_vector_option>
                <debug_vector_option id="GPU_PRIVATE_DBGEN">
                    <bit>28</bit>
                    <description>Enable GPU_PRIVATE_DBGEN (GPU_PRIVATE Invasive Debug).</description>
                </debug_vector_option>
                <debug_vector_option id="APPS_DBGEN">
                    <bit>29</bit>
                    <description>Enable APPS_DBGEN (APPS Non-Secure Invasive Debug).</description>
                </debug_vector_option>
                <debug_vector_option id="APPS_NIDEN">
                    <bit>30</bit>
                    <description>Enable APPS_NIDEN (APPS Non-Secure Non-Invasive Debug).</description>
                </debug_vector_option>
                <debug_vector_option id="LPC_IGNORE">
                    <bit>31</bit>
                    <description>Enable APPS_NIDEN (APPS Non-Secure Non-Invasive Debug).</description>
                </debug_vector_option>
                <debug_vector_option id="MSS_SCALAR_DBGEN">
                    <bit>32</bit>
                    <description>Enable MSS_SCALAR_DBGEN (Modem SCALAR Invasive Debug).</description>
                </debug_vector_option>
                <debug_vector_option id="MSS_SCALAR_NIDEN">
                    <bit>33</bit>
                    <description>Enable MSS_SCALAR_NIDEN (Modem SCALAR Non-Invasive Debug).</description>
                </debug_vector_option>
                <debug_vector_option id="DDRSS_DBGEN">
                    <bit>46</bit>
                    <description>Enable DDRSS_DBGEN (DDRSS Invasive Debug).</description>
                </debug_vector_option>
                <debug_vector_option id="DDRSS_NIDEN">
                    <bit>47</bit>
                    <description>Enable DDRSS_NIDEN (DDRSS Non-Invasive Debug).</description>
                </debug_vector_option>
                <debug_vector_option id="DAP_DBGEN">
                    <bit>50</bit>
                    <description>Enable DAP_DBGEN (DAP Invasive Debug).</description>
                </debug_vector_option>
                <debug_vector_option id="DAP_NIDEN">
                    <bit>51</bit>
                    <description>Enable DAP_NIDEN (DAP Non-Invasive Debug).</description>
                </debug_vector_option>
                <debug_vector_option id="APPS_SCANDUMP_REENABLE">
                    <bit>52</bit>
                    <description>Enable APPS_SCANDUMP_REENABLE feature.</description>
                    <enabled_if_crash_dump_vector>
                        <value>MINI_DUMP</value>
                        <value>NS_FULL_DUMP</value>
                        <value>SEC_FULL_DUMP</value>
                    </enabled_if_crash_dump_vector>
                </debug_vector_option>
                <debug_vector_option id="DDRSS_SCANDUMP_REENABLE">
                    <bit>53</bit>
                    <description>Enable DDRSS_SCANDUMP_REENABLE feature.</description>
                </debug_vector_option>
                <debug_vector_option id="DEBUGBUS_DISABLE_REENABLE">
                    <bit>54</bit>
                    <description>Enable DEBUGBUS_DISABLE_REENABLE feature.</description>
                </debug_vector_option>
                <debug_vector_option id="DCC_DISABLE_REENABLE">
                    <bit>55</bit>
                    <description>Enable DCC_DISABLE_REENABLE feature.</description>
                    <enabled_if_crash_dump_vector>
                        <value>MINI_DUMP</value>
                        <value>NS_FULL_DUMP</value>
                        <value>SEC_FULL_DUMP</value>
                    </enabled_if_crash_dump_vector>
                </debug_vector_option>
                <debug_vector_option id="EUD_DISABLE_REENABLE">
                    <bit>56</bit>
                    <description>Enable EUD_DISABLE_REENABLE feature.</description>
                </debug_vector_option>
                <debug_vector_option id="SMMU_SCAN_DUMP_REENABLE">
                    <bit>57</bit>
                    <description>Enable SMMU_SCAN_DUMP_REENABLE feature.</description>
                </debug_vector_option>
                <debug_vector_option id="SP_DISABLE_REENABLE">
                    <bit>58</bit>
                    <description>Enable SP_DISABLE_REENABLE feature.</description>
                </debug_vector_option>
                <debug_vector_option id="SEC_BOOT_GPIO">
                    <bit>59</bit>
                    <description>Enable SEC_BOOT_GPIO feature.</description>
                </debug_vector_option>
            </debug_vector>
            <subsystems>
                <subsystem id="AP_SEC_SS_MSID">
                    <supported_debug_options>
                        <debug_option id="TZ_LOG_EN">
                            <bit>0</bit>
                            <description>Enable TZ and TA logging.</description>
                        </debug_option>
                        <debug_option id="INDICATE_SECURE_WATCHDOG_ACCESS">
                            <bit>30</bit>
                            <description>Indicate to TZ that Secure Watchdog Access is enabled.</description>
                        </debug_option>
                        <debug_option id="MINI_DUMP_EN">
                            <bit>31</bit>
                            <description>Enable MINI_DUMP collection.</description>
                        </debug_option>
                    </supported_debug_options>
                </subsystem>
                <subsystem id="AP_NSEC_SS_MSID">
                    <supported_debug_options>
                        <debug_option id="LOG_EN">
                            <bit>0</bit>
                            <description>Enable Logging.</description>
                        </debug_option>
                        <debug_option id="DSP_S1_SMMU_FAULT_DIS">
                            <bit>1</bit>
                            <description>Enable DSP_S1_SMMU_FAULT_DIS feature.</description>
                        </debug_option>
                        <debug_option id="MINI_DUMP_EN">
                            <bit>31</bit>
                            <description>Enable MINI_DUMP collection.</description>
                        </debug_option>
                    </supported_debug_options>
                </subsystem>
                <subsystem id="MODEM_SS_MSID">
                    <supported_debug_options>
                        <debug_option id="LOG_EN">
                            <bit>0</bit>
                            <description>Enable Logging.</description>
                        </debug_option>
                        <debug_option id="DYN_USR_PD_FULL_DUMP_EN">
                            <bit>1</bit>
                            <description>Permit collection of full PD Dump of DSP Dynamic User PDs.</description>
                        </debug_option>
                        <debug_option id="DYN_USR_PD_SIGN_VERIFY_BYPASS_EN">
                            <bit>2</bit>
                            <description>Permit module signature verification bypass in DSP Dynamic User PDs.</description>
                        </debug_option>
                        <debug_option id="DYN_USR_PD_CRITICAL_PROC_EN">
                            <bit>3</bit>
                            <description>Permit DSP Dynamic user PDs to be created as a critical process.</description>
                        </debug_option>
                        <debug_option id="CLEAR_SS_ON_NS_FULL_DUMP">
                            <bit>11</bit>
                            <description>Clear subsystem region when NS_FULL_DUMP is configured.</description>
                        </debug_option>
                        <debug_option id="MINI_DUMP_EN">
                            <bit>31</bit>
                            <description>Enable MINI_DUMP collection.</description>
                        </debug_option>
                    </supported_debug_options>
                </subsystem>
                <subsystem id="AOP_SS_MSID">
                    <supported_debug_options>
                        <debug_option id="ENABLE_PERIODIC_WAKEUP">
                            <bit>1</bit>
                            <description>Enable periodic sequencer wakeup.</description>
                        </debug_option>
                        <debug_option id="INDICATE_SECURE_WATCHDOG_ACCESS">
                            <bit>30</bit>
                            <description>Indicate to AOP that Secure Watchdog Access is enabled.</description>
                        </debug_option>
                        <debug_option id="MINI_DUMP_EN">
                            <bit>31</bit>
                            <description>Enable MINI_DUMP collection.</description>
                        </debug_option>
                    </supported_debug_options>
                </subsystem>
                <subsystem id="TME_CPU_SS_MSID">
                    <supported_debug_options>
                        <debug_option id="ENABLE_PERIODIC_WAKEUP">
                            <bit>1</bit>
                            <description>Enable periodic sequencer wakeup.</description>
                        </debug_option>
                        <debug_option id="MINI_DUMP_EN">
                            <bit>31</bit>
                            <description>Enable MINI_DUMP collection.</description>
                        </debug_option>
                    </supported_debug_options>
                </subsystem>
                <subsystem id="SHRM_SS_MSID">
                    <supported_debug_options>
                        <debug_option id="MINI_DUMP_EN">
                            <bit>31</bit>
                            <description>Enable MINI_DUMP collection.</description>
                        </debug_option>
                    </supported_debug_options>
                </subsystem>
                <subsystem id="CPUCP_SS_MSID">
                    <supported_debug_options>
                        <debug_option id="MINI_DUMP_EN">
                            <bit>31</bit>
                            <description>Enable MINI_DUMP collection.</description>
                        </debug_option>
                    </supported_debug_options>
                </subsystem>
            </subsystems>
            <allowed_test_signed_images>
                <value>TME_SEQ_SS_SWID</value>
                <value>QTEE_SS_SWID</value>
                <value>QHEE_SS_SWID</value>
                <value>SHRM_SS_SWID</value>
                <value>AOP_SS_SWID</value>
                <value>CPUCP_SS_SWID</value>
                <value>MODEM_SS_SWID</value>
            </allowed_test_signed_images>
            <allowed_test_signed_images_vector>
                <value>TME_SEQ_SS_SWID</value>
                <value>QTEE_SS_SWID</value>
                <value>QHEE_SS_SWID</value>
                <value>SHRM_SS_SWID</value>
                <value>AOP_SS_SWID</value>
                <value>CPUCP_SS_SWID</value>
                <value>MODEM_SS_SWID</value>
            </allowed_test_signed_images_vector>
            <limits>
                <tag pointer="/SvcDebugPolicy/EntitlementCertificate/Entitlements/DebugEntitlement/AuthorizedDebugVector">
                    <byte_size>16</byte_size>
                </tag>
                <tag pointer="/SvcDebugPolicy/EntitlementCertificate/Entitlements/DebugEntitlement/AuthorizedTestSignedImageVector">
                    <byte_size>8</byte_size>
                </tag>
                <tag pointer="/SvcDebugPolicy/DebugPolicyData/DebugVector">
                    <byte_size>16</byte_size>
                </tag>
                <tag pointer="/SvcDebugPolicy/DebugPolicyData/TestSignedImageVector">
                    <byte_size>8</byte_size>
                </tag>
                <tag pointer="/SvcDebugPolicy/DebugPolicyData/OemTestRootCaHashValues">
                    <max_hash_array_length>4</max_hash_array_length>
                </tag>
                <tag pointer="/SvcDebugPolicy/DebugPolicyData/ChipConstraints/OemBatchKeyHash">
                    <not_used></not_used>
                </tag>
            </limits>
        </tme>
    </debugging>
    <fuse_blowing>
        <image_id>SEC-ELF</image_id>
        <fuse_regions>
            <fuse_region id="OEM_SECURITY_POLICY">
                <fuse_row address="0x221c0090">
                    <fuse>
                        <name>DISALLOW_SOC_DEBUG</name>
                        <description>Recommendation is to not provide --fuse-disallow-soc-debug. DisallowSOCDEBUG
'1' - Disallow unlocking of debug interfaces for the entire SoC (i.e. no SoC debug possible permanently). Requires Activate_Security_Policy fuse set to '1' to take effect. Not recommended. No RMA /JTAG access possible. 
'0' - debugging is available.</description>
                        <bits>0</bits>
                    </fuse>
                    <fuse>
                        <name>ENFORCE_OEM_AUTHZ_ON_SOC_DEBUG</name>
                        <description>Recommendation is to provide --fuse-enforce-oem-authz-on-soc-debug. EnforceOemAuthzOnSoCDebug
'1' - Enforce OEM authorization of Debug Policy Requests. When set, OEM must counter-sign Qualcomm debug policies and TME must verify both signatures (Qualcomm and OEM). Requires Activate_Security_Policy fuse set to '1' to take effect. 
'0' - Do not enforce OEM counter-signing.</description>
                        <bits>1</bits>
                    </fuse>
                    <fuse>
                        <name>ENFORCE_OEM_AUTHZ_ON_FUSE_OVERRIDES</name>
                        <description>Recommendation is to provide --fuse-enforce-oem-authz-on-fuse-overrides. EnforceOemAuthzOnFuseOverrides
'1' - Fuse overwrite request requires an OEM signature. Requires Activate_Security_Policy fuse set to '1' to take effect. 
'0' - Fuse overwrite request does not require an OEM signature.</description>
                        <bits>4</bits>
                    </fuse>
                    <fuse>
                        <name>ENFORCE_OEM_AUTHZ_ON_ROM_PATCH</name>
                        <description>Recommendation is to provide --fuse-enforce-oem-authz-on-rom-patch. EnforceOemAuthzOnROMPatch
'1' - Updates to TME/SoC ROM (RoT) requires OEM signature. Requires Activate_Security_Policy fuse set to '1' to take effect.  
'0' - Updates to TME/SoC ROM (RoT) do not require OEM signature.</description>
                        <bits>5</bits>
                    </fuse>
                    <fuse>
                        <name>ACTIVATE_SECURITY_POLICY</name>
                        <description>Recommendation is to provide --fuse-activate-security-policy. ActivateSecurityPolicy
Set to '1' for OEMSecurityPolicy bits 0,1,4,5 to take effect.</description>
                        <bits>11</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_DEVICE_LCS</name>
                        <description>Recommended value is --fuse-oem-device-lcs=0x3. OEM_DEVICE_LCS (OEM Device Life cycle state)
01        =&gt; OEM_DEV_LCSID
00,1X =&gt; OEM_PROD_LCSID.</description>
                        <bits>17:16</bits>
                    </fuse>
                    <fuse>
                        <name>AUTH_EN</name>
                        <description>Recommendation is to provide --fuse-auth-en. Blow this bit to enable secure boot for apps and other peripheral images. When this bit is '1'; enables authentication for any code that references secure boot configuration.</description>
                        <bits>33</bits>
                    </fuse>
                    <fuse>
                        <name>PK_HASH_IN_FUSE</name>
                        <description>Recommendation is to provide --fuse-pk-hash-in-fuse. For boot configuration : 
- If this bit is '0' use the internal ROM hash index and OEM_SECURE_BOOT1_ROM_PK_HASH_IDX[3:0] for the root certificate hash.  
- If this bit is '1' use the value stored in MRC HASH  for the root certificate hash.</description>
                        <bits>34</bits>
                    </fuse>
                    <fuse>
                        <name>USE_SERIAL_NUM</name>
                        <description>Recommendation is to not provide --fuse-use-serial-num. If this bit is '1' then the unique device serial number is required in the authentication of code for boot configuration.</description>
                        <bits>35</bits>
                    </fuse>
                    <fuse>
                        <name>ROM_PK_HASH_IDX</name>
                        <description>Recommended value is --fuse-rom-pk-hash-idx=0x0. If PK_HASH_IN_FUSE = '0'; this value selects which root certificate hash to use from the ROM table.</description>
                        <bits>39:36</bits>
                    </fuse>
                </fuse_row>
            </fuse_region>
            <fuse_region id="WRITE_PERMISSIONS">
                <fuse_row address="0x221c00d8">
                    <fuse>
                        <name>OEM_SECURITY_POLICY_WRITE_DISABLE</name>
                        <description>Recommendation is to provide --fuse-oem-security-policy-write-disable. Disables further QFPROM changes to OEM SECURITY POLICY region. Blow this bit after the OEM SECURITY POLICY region has been completely provisioned.</description>
                        <bits>5</bits>
                    </fuse>
                    <fuse>
                        <name>WRITE_PERMISSIONS_WRITE_DISABLE</name>
                        <description>Recommendation is to provide --fuse-write-permissions-write-disable. Disables further QFPROM changes to WRITE PERMISSIONS region. Blow this bit only if no further changes to Write Permissions are needed.</description>
                        <bits>7</bits>
                    </fuse>
                    <fuse>
                        <name>READ_PERMISSIONS_WRITE_DISABLE</name>
                        <description>Recommendation is to provide --fuse-read-permissions-write-disable. Disables further QFPROM changes to READ PERMISSIONS region. Blow this bit after the READ PERMISSIONS region has been completely provisioned.</description>
                        <bits>8</bits>
                    </fuse>
                    <fuse>
                        <name>FUSE_REDUNDANCY_ENABLE_WRITE_DISABLE</name>
                        <description>Recommendation is to provide --fuse-fuse-redundancy-enable-write-disable. Disables further QFPROM changes to FUSE REDUNDANCY ENABLE region. Blow this bit after the FUSE REDUNDANCY ENABLE region has been completely provisioned.</description>
                        <bits>9</bits>
                    </fuse>
                    <fuse>
                        <name>DEBUG_DISABLE_WRITE_DISABLE</name>
                        <description>Recommendation is to provide --fuse-debug-disable-write-disable. Disables further QFPROM changes to DEBUG DISABLE region. Blow this bit after the DEBUG DISABLE region has been completely provisioned.</description>
                        <bits>10</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_CONFIG_WRITE_DISABLE</name>
                        <description>Recommendation is to provide --fuse-oem-config-write-disable. Disables further QFPROM changes to OEM CONFIG region. Blow this bit after the OEM CONFIG region has been completely provisioned.</description>
                        <bits>12</bits>
                    </fuse>
                    <fuse>
                        <name>MRC_HASH_WRITE_DISABLE</name>
                        <description>Recommendation is to provide --fuse-mrc-hash-write-disable. Disables further QFPROM changes to MRC HASH region. Blow this bit after the MRC HASH region has been completely provisioned.</description>
                        <bits>24</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_PRODUCT_SEED_WRITE_DISABLE</name>
                        <description>Recommendation is to provide --fuse-oem-product-seed-write-disable. Disables further QFPROM changes to OEM PRODUCT SEED region. Blow this bit after the OEM PRODUCT SEED region has been completely provisioned.</description>
                        <bits>25</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_SPARE_0_WRITE_DISABLE</name>
                        <description>Disables further QFPROM changes to OEM SPARE 0 region. Blow this bit after the OEM SPARE 0 region has been completely provisioned.</description>
                        <bits>31</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_SPARE_1_WRITE_DISABLE</name>
                        <description>Disables further QFPROM changes to OEM SPARE 1 region. Blow this bit after the OEM SPARE 1 region has been completely provisioned.</description>
                        <bits>32</bits>
                    </fuse>
                </fuse_row>
            </fuse_region>
            <fuse_region id="READ_PERMISSIONS">
                <fuse_row address="0x221c00e0">
                    <fuse>
                        <name>OEM_PRODUCT_SEED_READ_DISABLE</name>
                        <description>Recommendation is to provide --fuse-oem-product-seed-read-disable. Blow this bit after the OEM Product Seed region has been completely provisioned.</description>
                        <bits>25</bits>
                    </fuse>
                </fuse_row>
            </fuse_region>
            <fuse_region id="FUSE_REDUNDANCY_ENABLE">
                <fuse_row address="0x221c00e8">
                    <fuse>
                        <name>MRC_HASH_FEC_ENABLE</name>
                        <description>Recommendation is to provide --fuse-mrc-hash-fec-enable. Blow to enable FEC for MRC Hash region. Ensure that complete region is provisioned before FEC is enabled.</description>
                        <bits>24</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_PRODUCT_SEED_FEC_ENABLE</name>
                        <description>Recommendation is to provide --fuse-oem-product-seed-fec-enable. Blow to enable FEC for OEM Product Seed region. Ensure that complete region is provisioned before FEC is enabled.</description>
                        <bits>25</bits>
                    </fuse>
                </fuse_row>
            </fuse_region>
            <fuse_region id="DEBUG_DISABLE">
                <fuse_row address="0x221c00f0">
                    <fuse>
                        <name>QSEE_DBGEN_DISABLE</name>
                        <description>Recommendation is to provide --fuse-qsee-dbgen-disable. QSEE Invasive debug disable.</description>
                        <bits>12</bits>
                    </fuse>
                    <fuse>
                        <name>QSEE_NIDEN_DISABLE</name>
                        <description>Recommendation is to provide --fuse-qsee-niden-disable. QSEE Non-Invasive debug disable.</description>
                        <bits>13</bits>
                    </fuse>
                    <fuse>
                        <name>APPS_DBGEN_DISABLE</name>
                        <description>Recommendation is to provide --fuse-apps-dbgen-disable. Apps Invasive debug disable.</description>
                        <bits>32</bits>
                    </fuse>
                    <fuse>
                        <name>APPS_NIDEN_DISABLE</name>
                        <description>Recommendation is to provide --fuse-apps-niden-disable. Apps Non-Invasive debug disable.</description>
                        <bits>33</bits>
                    </fuse>
                    <fuse>
                        <name>MSS_SCALAR_NIDEN_DISABLE</name>
                        <description>Recommendation is to provide --fuse-mss-scalar-niden-disable. MSS Scalar Non-Invasive debug disable.</description>
                        <bits>35</bits>
                    </fuse>
                    <fuse>
                        <name>DDRSS_NIDEN_DISABLE</name>
                        <description>Recommendation is to provide --fuse-ddrss-niden-disable. DDRSS Non-Invasive debug disable.</description>
                        <bits>49</bits>
                    </fuse>
                    <fuse>
                        <name>DAP_DBGEN_DISABLE</name>
                        <description>Recommendation is to provide --fuse-dap-dbgen-disable. DAP Invasive debug disable.</description>
                        <bits>52</bits>
                    </fuse>
                    <fuse>
                        <name>DAP_NIDEN_DISABLE</name>
                        <description>Recommendation is to provide --fuse-dap-niden-disable. DAP Non-Invasive debug disable.</description>
                        <bits>53</bits>
                    </fuse>
                    <fuse>
                        <name>APPS_SCANDUMP_DISABLE</name>
                        <description>Recommendation is to provide --fuse-apps-scandump-disable. Apps Scan Dump disable.</description>
                        <bits>54</bits>
                    </fuse>
                    <fuse>
                        <name>DDRSS_SCANDUMP_DISABLE</name>
                        <description>Recommendation is to provide --fuse-ddrss-scandump-disable. DDRSS Scan Dump disable.</description>
                        <bits>55</bits>
                    </fuse>
                    <fuse>
                        <name>DEBUGBUS_DISABLE</name>
                        <description>Recommendation is to provide --fuse-debugbus-disable. Debug bus disable.</description>
                        <bits>56</bits>
                    </fuse>
                    <fuse>
                        <name>DCC_DISABLE</name>
                        <description>Recommendation is to provide --fuse-dcc-disable. DCC disable.</description>
                        <bits>57</bits>
                    </fuse>
                    <fuse>
                        <name>SMMU_SCANDUMP_DISABLE</name>
                        <description>Recommendation is to provide --fuse-smmu-scandump-disable. SMMU Scan Dump disable.</description>
                        <bits>59</bits>
                    </fuse>
                </fuse_row>
            </fuse_region>
            <fuse_region id="OEM_CONFIG">
                <fuse_row address="0x221c0108">
                    <fuse>
                        <name>E_DLOAD_DISABLE</name>
                        <description>OEM Optional. Disables emergency download via removable SD and/or USB downloader in Apps PBL error handler.</description>
                        <bits>0</bits>
                    </fuse>
                    <fuse>
                        <name>ENUM_TIMEOUT</name>
                        <description>OEM Optional. BOOT ROM must support USB enumeration timeout. Timeout applies to both enumeration for FLCB (fast low current boot) and USB download mode. If USB is not enumerated within time (90 seconds), quit USB enumeration If USB suspend or disconnected after enumeration, start timer again.</description>
                        <bits>1</bits>
                    </fuse>
                    <fuse>
                        <name>FORCE_DLOAD_DISABLE</name>
                        <description>OEM optional. If FORCE_DLOAD_DISABLE is '0'; device goes to download mode if an error occurs very early in XBL1. If FORCE_DLOAD_DISABLE is set to '1'; device goes into cold boot if an error occurs very early in XBL1.</description>
                        <bits>2</bits>
                    </fuse>
                    <fuse>
                        <name>FORCE_USB_BOOT_GPIO_DISABLE</name>
                        <description>This fuse is used to control booting from FORCE_USB_BOOT_GPIO. It only controls FORCE_USB_GPIO based boot, FDL cookies are not controlled by this fuse.
If fuse value = 0 =&gt; PBL honors boot from USB if FORCE_USB_BOOT GPIO is flipped. If the GPIO is set to high, PBL will enter USB FEDL path irrespective of FAST_BOOT option selected.
If fuse value = 1 =&gt; PBL will not enter USB FEDL mode even if FORCE_USB_GPIO is flipped to 1. Boot from FORCE USB GPIO is disabled.</description>
                        <bits>3</bits>
                    </fuse>
                    <fuse>
                        <name>SDCC_ADMA_DISABLE</name>
                        <description>0 is default ADMA mode enabled 
1 - ADMA mode disabled and fallback to FIFO mode.</description>
                        <bits>4</bits>
                    </fuse>
                    <fuse>
                        <name>FAST_BOOT</name>
                        <description>These fuses are used by boot code to specify which device has priority to be booted from.
b000 = DEFAULT (NAND first then USB),
b001 = PCIE (boot up to gen4 Lane detection during link negotiation No need for boot to detect),
b010 = USB SS,
b011 = EMMC -&gt; USB SS,
b100 = NAND -&gt; USB SS (non zero default),
b101 = NAND -&gt; PCIE,
b110 = Reserved,
b111 = eMMC -&gt; PCIE.</description>
                        <bits>7:5</bits>
                    </fuse>
                    <fuse>
                        <name>PBL_QSPI_BOOT_EDL_ENABLED</name>
                        <description>When fuse is blown, EDL Path will be QSPI-&gt;SD-&gt;USB else the EDL path will be as before SD-&gt;USB.</description>
                        <bits>10</bits>
                    </fuse>
                    <fuse>
                        <name>SPI_CLK_BOOT_FREQ</name>
                        <description>Default is 37.5 MHz and when blown 19.2 MHz.</description>
                        <bits>11</bits>
                    </fuse>
                    <fuse>
                        <name>PBL_FDL_TIMEOUT_RESET_FEATURE_ENABLE</name>
                        <description>Fuse bit to reset device if PBL enters into EDL mode unintentionally. Enable/disable Force download timeout in case device goes into force USB download accidentally. If enabled, device will reboot after timeout if in force USB download mode. If disabled, phone stays in force USB download.
0 =&gt;  Disabled
1 =&gt;  Enabled.</description>
                        <bits>13</bits>
                    </fuse>
                    <fuse>
                        <name>WDOG_EN</name>
                        <description>Prevents WDOG_DISABLE GPIO from disabling WDOG.  Frees up the GPIO and prevents potential for abuse by attacker. This selects whether GPIO_xx can be used to disable the watchdog timer.
If enabled, then GPIO_xx, when high, will disable the watchdog.
If disabled, then GPIO_xx will not disable the watchdog. The watchdog can still be disabled via software control.
0 =&gt;  Disabled
1 =&gt;  Enabled.</description>
                        <bits>14</bits>
                    </fuse>
                    <fuse>
                        <name>PBL_LOG_DISABLE</name>
                        <description>Used for controlling logging mechanism in PBL. '1' To limit the information collected in PBL logs.</description>
                        <bits>15</bits>
                    </fuse>
                    <fuse>
                        <name>PBL_USB_TYPE_C_DISABLE</name>
                        <description>Disables type-C functionality during PBL. PBL communication/enumeration happens over USB0_SS only. USB1_SS cannot be used.</description>
                        <bits>16</bits>
                    </fuse>
                    <fuse>
                        <name>ROOT_CERT_TOTAL_NUM</name>
                        <description>Defines the total root cert number supported from the certificate (Upto 4 roots).</description>
                        <bits>18:17</bits>
                    </fuse>
                    <fuse>
                        <name>QSPI_DMA_DISABLE</name>
                        <description>0 =&gt; QSPI DMA is enabled
1 =&gt; QSPI DMA is disabled.</description>
                        <bits>19</bits>
                    </fuse>
                    <fuse>
                        <name>SEL_BOOT_PARTITION_A_B</name>
                        <description>Used for boot partition selection. It has corresponding boot_cfg GPIO and used along with PBL_ENABLE_AB_SEL fuse.
Fuse Blow Value:
0 - Partition A
1 - Partition B.</description>
                        <bits>21</bits>
                    </fuse>
                    <fuse>
                        <name>USB_SS_DISABLE</name>
                        <description>Used to disable USB SS enumeration during Boot.</description>
                        <bits>22</bits>
                    </fuse>
                    <fuse>
                        <name>USB_PIPO_DISABLE</name>
                        <description>If fuse value = 0 =&gt; USB Plug in – Plug out feature is enabled in PBL. With this feature, if user disconnects and reconnects USB cable on the device we will be able to re-enumerate and go back to EDL with max 3 retries/plugins
If fuse value = 1 =&gt; USB Plug in – Plug out feature is disabled.</description>
                        <bits>23</bits>
                    </fuse>
                    <fuse>
                        <name>PCIE_SRIOV_VF_EN</name>
                        <description>Set to enable VFs in PCIe enumeration. Disabled by default and fuse blow to enable the VF on auto platforms.</description>
                        <bits>24</bits>
                    </fuse>
                    <fuse>
                        <name>PBL_ENABLE_AB_SEL</name>
                        <description>Fuse to enable A/B partition selection in PBL. Once blown, PBL would start looking at BOOT_CONFIG[SEL_BOOT_PARTITION_A_B].</description>
                        <bits>25</bits>
                    </fuse>
                    <fuse>
                        <name>EXTEND_XBL_IMG_SCAN_RANGE</name>
                        <description>If set, PBL would scan for XBL image in extended range.
Fuse Blow Value:
0 - Range is 32 blocks (8MB)
1 - Range is 72 blocks (18MB).</description>
                        <bits>26</bits>
                    </fuse>
                    <fuse>
                        <name>SP_DISABLE</name>
                        <description>Disable Secure Processor Unit by the SoC. 
0: SPU is enabled.
1: SPU is permanently disabled by SoC.</description>
                        <bits>27</bits>
                    </fuse>
                    <fuse>
                        <name>DEBUG_POLICY_DISABLE</name>
                        <description>Recommendation is to not provide --fuse-debug-policy-disable. Debug Policy is bypassed when this bit is 1. Debug Policy provides a means to re-enable debug capabilities under OEM-specified selectable conditions.</description>
                        <bits>28</bits>
                    </fuse>
                    <fuse>
                        <name>PBL_FDL_TIMEOUT_RESET_TO_VAL</name>
                        <description>This fuse allows OEMs to have configurable timeout values for FDL timeout reset feature.
00: 05 ms (default)
01: 30 ms
10: 60 ms
11: 120 ms.</description>
                        <bits>30:29</bits>
                    </fuse>
                    <fuse>
                        <name>PBL_EN_AB_OCIMEM_COOKIE</name>
                        <description>Recommendation is to not provide --fuse-pbl-en-ab-ocimem-cookie. To enable A/B, set Fuse Blow Value to 1.</description>
                        <bits>32</bits>
                    </fuse>
                </fuse_row>
                <fuse_row address="0x221c0110">
                    <fuse>
                        <name>TZ_SW_CRYPTO_FIPS_ENABLE</name>
                        <description>Enable/Disable TZ FIPS certifiable mode. Blow this fuse for TZ SW crypto to be FIPS 140-3 certifiable.

Set to '1' to enable TZ FIPS certifiable mode

If OEM needs to evaluate FIPS (for performance, security etc), do not enable this fuse. Set OEM devcfg oem_is_fips_enabled_for_test = 1.

Note: The fuse value and the specific crypto version are required to claim for FIPS validated module. Once this is enabled through fuse, the device will be placed in FIPS mode and cannot be reverted.</description>
                        <bits>4</bits>
                    </fuse>
                    <fuse>
                        <name>SPARE_REG0_SECURE</name>
                        <description>This fuse determines if the corresponding OEM spare region is treated as secure. If blown, it indicates secure, and the region has the properties of a customer private key, and is not readable through SW while debug is enabled.</description>
                        <bits>12</bits>
                    </fuse>
                    <fuse>
                        <name>SPARE_REG1_SECURE</name>
                        <description>This fuse determines if the corresponding OEM spare region is treated as secure. If blown, it indicates secure, and the region has the properties of a customer private key, and is not readable through SW while debug is enabled.</description>
                        <bits>13</bits>
                    </fuse>
                    <fuse>
                        <name>EKU_ENFORCEMENT_EN</name>
                        <description>Recommendation is to not provide --fuse-eku-enforcement-en. When this fuse is blown will enable enforcement of the EKU field in the certificate. EKU enforcement is one of the requirements to meet Common Criteria Mobile Device Fundamental Protection Profile (MDFPP).</description>
                        <bits>30</bits>
                    </fuse>
                    <fuse>
                        <name>DISABLE_RSA</name>
                        <description>When this bit is 0 and signed image type is SHA384 + RSA/ECC is 0 =&gt; RSA OPERATION_x000D_
When this bit is 0 and signed image type is SHA384 + RSA/ECC IS 1=&gt; ECC OPERATION USING PKA IP_x000D_
When this bit is 1 and signed image type is SHA384 + RSA/ECC is 0 =&gt; Error_x000D_
When this bit is 1 and signed image type is SHA384 + RSA/ECC IS 1=&gt; ECC OPERATION USING PKA IP.</description>
                        <bits>31</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_HW_ID</name>
                        <description>The OEM hardware ID. Bits 15:0.</description>
                        <bits>47:32</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_PRODUCT_ID</name>
                        <description>The OEM product ID. Bits 15:0.</description>
                        <bits>63:48</bits>
                    </fuse>
                </fuse_row>
                <fuse_row address="0x221c0118">
                    <fuse>
                        <name>PERIPH_PID</name>
                        <description>Bits 15:0 of the PID.</description>
                        <bits>15:0</bits>
                    </fuse>
                    <fuse>
                        <name>PERIPH_VID</name>
                        <description>Bits 15:0 of the VID.</description>
                        <bits>31:16</bits>
                    </fuse>
                    <fuse>
                        <name>ANTI_ROLLBACK_FEATURE_EN</name>
                        <description>Recommended value is --fuse-anti-rollback-feature-en=0xf. Bit 0 - BOOT_ANTI_ROLLBACK_EN
Bit 1 - TZAPPS_ANTI_ROLLBACK_EN
Bit 2 - PILSUBSYS_ANTI_ROLLBACK_EN
Bit 3 - RESERVED FOR FUTURE USE (Blow this bit).</description>
                        <bits>35:32</bits>
                    </fuse>
                    <fuse>
                        <name>PCIE_SUBSYS_DEV_ID</name>
                        <description>Indicates PCIe Subsystem Device ID. Both PCIE_SUBSYS_VENDOR_ID and PCIE_SUBSYS_DEV_ID need to be blown to a non-zero value to take effect.</description>
                        <bits>55:40</bits>
                    </fuse>
                    <fuse>
                        <name>PCIE_SUBSYS_VENDOR_ID_7_0</name>
                        <description>PCIE_SUBSYS_VENDOR_ID[7:0] Indicates PCIe Subsystem Vendor ID. Both PCIE_SUBSYS_VENDOR_ID and PCIE_SUBSYS_DEV_ID need to be blown to a non-zero value to take effect.</description>
                        <bits>63:56</bits>
                    </fuse>
                </fuse_row>
                <fuse_row address="0x221c0120">
                    <fuse>
                        <name>PCIE_SUBSYS_VENDOR_ID_15_8</name>
                        <description>PCIE_SUBSYS_VENDOR_ID[15:8] Indicates PCIe Subsystem Vendor ID. Both PCIE_SUBSYS_VENDOR_ID and PCIE_SUBSYS_DEV_ID need to be blown to a non-zero value to take effect.</description>
                        <bits>7:0</bits>
                    </fuse>
                    <fuse>
                        <name>ETHERNET_MAC_ID</name>
                        <description>Customer to store ethernet MAC ID permanently. It will be then read back during boot and used for customer use case. EMAC ethernet module will read address of the fuse register and get the content. If a valid MAC address is found then it is configured accordingly on the eth0 interface.</description>
                        <bits>63:16</bits>
                    </fuse>
                </fuse_row>
            </fuse_region>
            <fuse_region id="MRC_HASH">
                <fuse_row address="0x221c0320">
                    <fuse>
                        <name>MRC_HASH</name>
                        <description>Hash of Multiple Root Certificates (up to 4 certificates).</description>
                        <bits>55:0</bits>
                    </fuse>
                    <fuse>
                        <name>FEC_124</name>
                        <description>FEC autocalculated based on 56 bits in the row.</description>
                        <bits>62:56</bits>
                    </fuse>
                </fuse_row>
                <fuse_row address="0x221c0328">
                    <fuse>
                        <name>MRC_HASH</name>
                        <bits>55:0</bits>
                    </fuse>
                    <fuse>
                        <name>FEC_125</name>
                        <description>FEC autocalculated based on 56 bits in the row.</description>
                        <bits>62:56</bits>
                    </fuse>
                </fuse_row>
                <fuse_row address="0x221c0330">
                    <fuse>
                        <name>MRC_HASH</name>
                        <bits>55:0</bits>
                    </fuse>
                    <fuse>
                        <name>FEC_126</name>
                        <description>FEC autocalculated based on 56 bits in the row.</description>
                        <bits>62:56</bits>
                    </fuse>
                </fuse_row>
                <fuse_row address="0x221c0338">
                    <fuse>
                        <name>MRC_HASH</name>
                        <bits>55:0</bits>
                    </fuse>
                    <fuse>
                        <name>FEC_127</name>
                        <description>FEC autocalculated based on 56 bits in the row.</description>
                        <bits>62:56</bits>
                    </fuse>
                </fuse_row>
                <fuse_row address="0x221c0340">
                    <fuse>
                        <name>MRC_HASH</name>
                        <bits>55:0</bits>
                    </fuse>
                    <fuse>
                        <name>FEC_128</name>
                        <description>FEC autocalculated based on 56 bits in the row.</description>
                        <bits>62:56</bits>
                    </fuse>
                </fuse_row>
                <fuse_row address="0x221c0348">
                    <fuse>
                        <name>MRC_HASH</name>
                        <bits>55:0</bits>
                    </fuse>
                    <fuse>
                        <name>FEC_129</name>
                        <description>FEC autocalculated based on 56 bits in the row.</description>
                        <bits>62:56</bits>
                    </fuse>
                </fuse_row>
                <fuse_row address="0x221c0350">
                    <fuse>
                        <name>MRC_HASH</name>
                        <bits>55:0</bits>
                    </fuse>
                    <fuse>
                        <name>FEC_130</name>
                        <description>FEC autocalculated based on 56 bits in the row.</description>
                        <bits>62:56</bits>
                    </fuse>
                </fuse_row>
                <fuse_row address="0x221c0358">
                    <fuse>
                        <name>MRC_HASH</name>
                        <bits>55:0</bits>
                    </fuse>
                    <fuse>
                        <name>FEC_131</name>
                        <description>FEC autocalculated based on 56 bits in the row.</description>
                        <bits>62:56</bits>
                    </fuse>
                </fuse_row>
                <fuse_row address="0x221c0360">
                    <fuse>
                        <name>MRC_HASH</name>
                        <bits>55:0</bits>
                    </fuse>
                    <fuse>
                        <name>FEC_132</name>
                        <description>FEC autocalculated based on 56 bits in the row.</description>
                        <bits>62:56</bits>
                    </fuse>
                </fuse_row>
                <fuse_row address="0x221c0368">
                    <fuse>
                        <name>MRC_HASH</name>
                        <bits>7:0</bits>
                    </fuse>
                    <fuse>
                        <name>FEC_133</name>
                        <description>FEC autocalculated based on 56 bits in the row.</description>
                        <bits>62:56</bits>
                    </fuse>
                </fuse_row>
            </fuse_region>
            <fuse_region id="OEM_PRODUCT_SEED">
                <fuse_row address="0x221c0370">
                    <fuse>
                        <name>OEM_PRODUCT_SEED</name>
                        <description>OEM Product Seed is generated by the OEM and written to SoC fuses. The seed value is used by the OEM to derive device provisioning keys that are specific to the OEM product. 
This value is protected by TME HW and is only readable by TME HW in the context of key derivation operations.</description>
                        <bits>55:0</bits>
                    </fuse>
                    <fuse>
                        <name>FEC_128</name>
                        <description>FEC autocalculated based on 56 bits in the row.</description>
                        <bits>62:56</bits>
                    </fuse>
                </fuse_row>
                <fuse_row address="0x221c0378">
                    <fuse>
                        <name>OEM_PRODUCT_SEED</name>
                        <bits>55:0</bits>
                    </fuse>
                    <fuse>
                        <name>FEC_129</name>
                        <description>FEC autocalculated based on 56 bits in the row.</description>
                        <bits>62:56</bits>
                    </fuse>
                </fuse_row>
                <fuse_row address="0x221c0380">
                    <fuse>
                        <name>OEM_PRODUCT_SEED</name>
                        <bits>15:0</bits>
                    </fuse>
                    <fuse>
                        <name>FEC_130</name>
                        <description>FEC autocalculated based on 56 bits in the row.</description>
                        <bits>62:56</bits>
                    </fuse>
                </fuse_row>
            </fuse_region>
            <fuse_region id="OEM_SPARE_0">
                <fuse_row address="0x221c0ca0">
                    <fuse>
                        <name>OEM_SPARE_0</name>
                        <bits>63:0</bits>
                    </fuse>
                </fuse_row>
                <fuse_row address="0x221c0ca8">
                    <fuse>
                        <name>OEM_SPARE_0</name>
                        <bits>63:0</bits>
                    </fuse>
                </fuse_row>
            </fuse_region>
            <fuse_region id="OEM_SPARE_1">
                <fuse_row address="0x221c0cb0">
                    <fuse>
                        <name>OEM_SPARE_1</name>
                        <bits>63:0</bits>
                    </fuse>
                </fuse_row>
                <fuse_row address="0x221c0cb8">
                    <fuse>
                        <name>OEM_SPARE_1</name>
                        <bits>63:0</bits>
                    </fuse>
                </fuse_row>
            </fuse_region>
        </fuse_regions>
        <sec_elf_properties>
            <elf_class>
                <default_elf_class>64</default_elf_class>
                <supported_elf_classes>
                    <value>64</value>
                    <value>32</value>
                </supported_elf_classes>
            </elf_class>
            <phy_addr>0x0000000087f30000</phy_addr>
            <sec_dat_segment_versions>
                <default_sec_dat_segment_version>3</default_sec_dat_segment_version>
                <supported_sec_dat_segment_versions>
                    <value>3</value>
                </supported_sec_dat_segment_versions>
            </sec_dat_segment_versions>
            <sec_dat_segment_placements>
                <default_sec_dat_segment_placement>START</default_sec_dat_segment_placement>
                <supported_sec_dat_segment_placements>
                    <value>ANY</value>
                </supported_sec_dat_segment_placements>
            </sec_dat_segment_placements>
            <sec_dat_segment_alignment>0x0000000000001000</sec_dat_segment_alignment>
        </sec_elf_properties>
    </fuse_blowing>
</tns:profile>
