Transition to Modules Supporting Approtect
Modules support approtect
Access Port Protection
Nordic begins to offer APprotect or Access Port protection features for all nRF52 and newer Bluetooth SoCs. The access port (SWDIO) can be locked to prevent hacking. For the best module availability, please recompile your codes with nRF_SDK v17.1.0 or newer to have compatibility with both the new and the old version silicon.
There is no need to re-certify for the approtect updated parts. The RF hardware is compliant in default state. All changes that have been made are either not impacting RF performance or they are opt-in. This means they are the same by default but that you can change the performance by changing the radio setup through application configuration.
The new APPROTECT mechanism is locked by default (the opposite of the legacy implementation).
To program a new device you need to start by unlocking it with an ERASEALL operation.
The device will only stay unlocked until it executes a proper reset (i.e. not a SysReset). You need to ensure that the device isn’t allowed to e.g. experience a power reset until all of the programming is complete.
A legacy firmware that hasn’t been recompiled will work fine. The device will (mostly) lock itself after the next reset.
To make full use of the read-back protection mechanism, a recompile with nRF5_SDK v17.1.0 or newer is required because that will enable an additional locking step.
Part Numbers for APprotect Versions
Module part numbers in production with non-approtect silicon, a “-p” is added the part number to indicate the new approtect versions. On the RFI shield, a “p” is marked to the right of module part number. The following new part numbers support approtect features. The modules in Bold are in stock. You can order 3 free samples on this webpage. Click on the module to order additional at normal price.
nRF52840 QIAA F: BT840-p, BT840F-p, BT840E-p, BT840X-p, BT840XE-p.
nRF52840 CKAA F: BC840-p, BC840E-p, BC840M-p.
nRF52833 QIAA B: BM833-p, BM833E-p, BM833F-p.
nRF52833 QDAA B: BC833M-p, BC833E-p.
nRF52832 QFAA G: BM832-p, BM832E-p, BT832-p, BT832F-p.
nRF52832 QFAA G with a PA: BT832X-p, BT832XE-p.
nRF52832 CIAA G: BC832-p
To encourage transition to modules supporting approtect, you can order free samples on the webpage. In 2023, availability of modules is the best if you can use both the old and the new version.
Part Numbers for New APprotect Modules
New modules began production with approtect silicon, no “-p” is added to the module part number. On the RFI shield, there is a running change to add a “p” to the right of module part number. The following and all new Nordic BLE modules support approtect.
nRF52840 QFAA: BM840, BM840P (P to indicate Pads for external antenna)
nRF5340 QKAA: BT40, BT40F, BT40E, BT40N, BT40NE.
nRF5340 CLAA: BC40C, BC40M, BC40P (P to indicate Pads for external antenna)
nRF52840 QIAA F: BT840N, BT840NE, BT840NEE.
nRF52833 QIAA B: BT833N, BT833NE.
AP Availability
On the updated webpages, product specifications, and selection guides, AP availability is the initial production date of the module.