# OTP format and configuration
Source: [https://docs.qualcomm.com/doc/80-Y8730-8/topic/otp_format_and_configuration.html](https://docs.qualcomm.com/doc/80-Y8730-8/topic/otp_format_and_configuration.html)
QCC730 includes OTP fuses to store chip‑specific and security‑related information, as well as to configure the behavior of the chip. OTP fuses have default values of zero (0) before being blown and values of one (1) after being blown. The value of fuses can be cleared to 0 until the region is locked.
The following figure shows various OTP fields.
Figure : QCC730 OTP format for secure boot 
See the following sections for more details about these fields.
## Read and write permission
Source: [https://docs.qualcomm.com/doc/80-Y8730-8/topic/otp_format_and_configuration.html](https://docs.qualcomm.com/doc/80-Y8730-8/topic/otp_format_and_configuration.html)
| Byte | Bit | Name | Description | Guidance |
| --- | --- | --- | --- | --- |
| 48 | 4 | READ\_PERMISSION\_HW\_ENCRYPTION\_KEY | Set to 1 to disable software reads to the hardware encryption key region | 1 |
| 51 | 2 | WRITE\_PERMISSION\_READ\_WRITE\_PEMRIONS | Set to 1 to disable software writes to the Read/Write Permissions region | 1 |
| 51 | 4 | WRITE\_PERMISSION\_HW\_ENCRYPTION\_KEY | Set to 1 to disable software writing to the hardware encryption key region | 1 |
| 51 | 5 | WRITE\_PERMISSION\_PK\_HASH | Set to 1 to disable software writing to the RoT hash region | 1 |
| 51 | 7 | WRITE\_PERMISSION\_OEM\_SECURE\_BOOT | Set to 1 to disable software writing to the OEM secure boot region | 1 |
| 52 | 0 | WRITE\_PERMISSION\_ANTI\_ROLL\_BACK | Set to 1 to disable software writing to the Anti‑rollback region | 1 |
| | | | | |
| | | | | |
| | | | | |
## Hardware keys
Source: [https://docs.qualcomm.com/doc/80-Y8730-8/topic/otp_format_and_configuration.html](https://docs.qualcomm.com/doc/80-Y8730-8/topic/otp_format_and_configuration.html)
Table : User data key
| Byte | Bit | Name | Description |
| --- | --- | --- | --- |
| 80‑95 | – | USER\_DATA\_KEY | 128‑bit random key used by the key derivation function (KDF) in conjunction with the device key to derive the secure storage encryption key.
Qualcomm provisions this key but doesn't maintain tracking information to a particular device. |
Table : Device key
| Byte | Bit | Name | **Description** |
| --- | --- | --- | --- |
| 64‑79 | – | HW\_DEVICE\_KEY | 128‑bit device unique key used by the KDF to derive other operation‑specific keys. Qualcomm provisions this key.
**Example**: This key is used to derive the secure storage encryption key. |
Table : Encryption key
| Byte | Bit | Name | Description |
| --- | --- | --- | --- |
| 96‑111 | – | HW\_ENCRYPTION\_KEY | 128‑bit key intended to be common to multiple devices used by the KDF to derive other operation‑specific keys. |
## RoT hash
Source: [https://docs.qualcomm.com/doc/80-Y8730-8/topic/otp_format_and_configuration.html](https://docs.qualcomm.com/doc/80-Y8730-8/topic/otp_format_and_configuration.html)
Table : RoT hash
| Byte | Bit | Name | Description |
| --- | --- | --- | --- |
| 112‑143 | – | PK\_HASH | The PK\_HASH is a SHA‑256 hash of the root certificates used for image signing over the life of the product.
The hash must be calculated over the number of root certificates specified in the TOTAL\_ROT\_NUM field. |
## OEM secure boot
Source: [https://docs.qualcomm.com/doc/80-Y8730-8/topic/otp_format_and_configuration.html](https://docs.qualcomm.com/doc/80-Y8730-8/topic/otp_format_and_configuration.html)
| Byte | Bit | Name | Description | Guidance |
| --- | --- | --- | --- | --- |
| 160 | 7:4 | TOTAL\_ROT\_NUM[3:0] | Total number of RoTs used to calculate the RoT hash. QCC730 supports only 1 RoT. | 1 |
| 162‑163 | | MODEL\_ID | | |
| 164 | 2:0 | SECURE\_BOOT\_ENFORCE[2:0] | Set to 0x7 to enable secure boot policy enforcement, such as image authentication, anti‑rollback check. | 7 |
| 165‑166 | – | OEM\_ID | The OEM ID is a 16‑bit identifier issued by Qualcomm.
The OEM ID is used by various features including secure boot image authentication. | It's recommended to blow the OEM\_ID to the assigned value. |
| 167 | 7 | OEM\_DEBUG\_DISABLE | Set to 1 to disable JTAG debugging. | 1 |
| 168 | 2 | HASH\_INTG\_CHK\_DISABLE | Set to 1 to disable hash integrity when secure boot policy enforcement is disabled. | 0 |
| 168 | 0 | DISABLE\_QC\_RMA | Set to 1 to disable the QC RMA password used by QC to enable hardware debug features. | 0 |
| | | | | |
## Anti‑rollback
Source: [https://docs.qualcomm.com/doc/80-Y8730-8/topic/otp_format_and_configuration.html](https://docs.qualcomm.com/doc/80-Y8730-8/topic/otp_format_and_configuration.html)
| Byte | Bit | Name | Description |
| --- | --- | --- | --- |
| 176 | 7:0 | ANTI\_ROLLBACK[7:0] | The sum of one bits in this field represents the minimum anti‑rollback image version that secure boot allows to run on this device. |
| 177 | 7:0 | ANTI\_ROLLBACK[15:8] | The sum of one bits in this field represents the minimum anti‑rollback image version that secure boot allows to run on this device. |
| 178 | 7:0 | ANTI\_ROLLBACK[23:16] | The sum of one bits in this field represents the minimum anti‑rollback image version that secure boot allows to run on this device. |
| 179 | 7:0 | ANTI\_ROLLBACK[31:24] | The sum of one bits in this field represents the minimum anti‑rollback image version that secure boot allows to run on this device. |
| 180 | 7:0 | ANTI\_ROLLBACK[39:32] | The sum of one bits in this field represents the minimum anti‑rollback image version that secure boot allows to run on this device. |
| 181 | 7:0 | ANTI\_ROLLBACK[47:40] | The sum of one bits in this field represents the minimum anti‑rollback image version that secure boot allows to run on this device. |
| 182 | 7:0 | ANTI\_ROLLBACK[55:48] | The sum of one bits in this field represents the minimum anti‑rollback image version that secure boot allows to run on this device. |
| 183 | 7:0 | ANTI\_ROLLBACK[63:56] | The sum of one bits in this field represents the minimum anti‑rollback image version that secure boot allows to run on this device. |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
## OTP fuse blowing process
Source: [https://docs.qualcomm.com/doc/80-Y8730-8/topic/otp_format_and_configuration.html](https://docs.qualcomm.com/doc/80-Y8730-8/topic/otp_format_and_configuration.html)
The NVM programmer is used to read and write QCC730
OTP, RRAM, and flash files.
For details, refer to [QCC730.FR.1.0 Programming Guide (80-Y8730-2)](doc/80-Y8730-2).
Last Published: Feb 10, 2026
[Previous Topic
Build and flash signed image](https://docs.qualcomm.com/bundle/publicresource/80-Y8730-8/topics/build_and_flash_signed_image.md) [Next Topic
Examples for secure boot configuration](https://docs.qualcomm.com/bundle/publicresource/80-Y8730-8/topics/example_for_secure_boot_configuration.md)