Preferred configurations to Support TrustZone Software On-SOC  TrustZone Boot ROM - 8 to 16K Bytes for signature check code  TrustZone RAM - 64 to 96K Bytes for data  Tightly Coupled Memory - TrustZone would use 2K in Instruction and 200bytes Data  L1 Cache is application dependant  L2 Cache is application dependant  AES or 3DES key for signing/ hiding data in external FLASH  Unique ID (can be part of above key)  RSA Public key (OR SHA hash of RSA Public Key) to allow checking of signatures on factory supplied code.