The BQ76922 device includes three security modes: SEALED, UNSEALED, and FULLACCESS, which can be used to limit the ability to view or change settings.

• In SEALED mode, most data and status can be read using commands and subcommands, but only selected settings can be changed. Data memory settings cannot be changed directly.
• UNSEALED mode includes SEALED functionality, and also adds the ability to execute additional subcommands, and read and write data memory.
• FULLACCESS mode allows capability to read and modify all device settings, including writing OTP memory.

Selected settings in the device can be modified while the device is in operation through supported commands and subcommands, but in order to modify all settings, the device must enter CONFIG_UPDATE mode (see Section 7.8.6), which stops device operation while settings are being updated. After the update is completed, the operation is restarted using the new settings. CONFIG_UPDATE mode is only available in FULLACCESS mode.

The BQ76922 device implements a key-access scheme to transition among SEALED, UNSEALED, and FULLACCESS modes. Each transition requires that a unique set of keys be sent to the device through subcommands. Refer to the BQ76922 Technical Reference Manual for more details.

The device provides additional checks which can be used to optimize system robustness, including subcommands which calculate the digital signature of the integrated instruction ROM and data ROM. These signatures should never change for a particular product. If these were to change, it would indicate an error, either that the ROM had been corrupted, or the readback of the ROM or calculation of the signature experienced an error. An additional subcommand calculates a digital signature for the static configuration data (which excludes calibration values) and compares it to a stored value, returning a flag if the result does not match.