| Field Name | Bits | Type | Reset Value | Description |
|---|
| PPK1_INVLD | 31:30 | roRead-only | 0x0 | Revokes PPK1 |
| PPK1_WRLK | 29 | roRead-only | 0x0 | Locks writing to PPK1 eFuses |
| PPK0_INVLD | 28:27 | roRead-only | 0x0 | Revokes PPK0 |
| PPK0_WRLK | 26 | roRead-only | 0x0 | Locks writing to PPK0 eFuses |
| RSA_EN | 25:11 | roRead-only | 0x0 | Enabels RSA Authentication during boot. All boots must be authenticated |
| SEC_LOCK | 10 | roRead-only | 0x0 | Disables the reboot into JTAG mode when doing a secure lockdown. |
| PROG_GATE_2 | 9 | roRead-only | 0x0 | Disables the PROG_GATE feature in the PPD. |
| PROG_GATE_1 | 8 | roRead-only | 0x0 | Disables the PROG_GATE feature in the PPD. |
| PROG_GATE_0 | 7 | roRead-only | 0x0 | Disables the PROG_GATE feature in the PPD. |
| DFT_DIS | 6 | roRead-only | 0x0 | Disables DFT
boot mode. This boot mode does not execute the PMU / CSU ROM |
| JTAG_DIS | 5 | roRead-only | 0x0 | Disables the JTAG controller. The only instructions available are BYPASS and IDCODE. |
| ERROR_DIS | 4 | roRead-only | 0x0 | Supresses error output from the PMU |
| BBRAM_DIS | 3 | roRead-only | 0x0 | Disables the BBRAM key |
| ENC_ONLY | 2 | roRead-only | 0x0 | Requeires all boots to be encrypted using the eFuse key. |
| AES_WRLK | 1 | roRead-only | 0x0 | Locks writing to the AES key section of eFuse |
| AES_RDLK | 0 | roRead-only | 0x0 | Locks the AES key CRC check function |