The TrustZone environment is extended to the programmable logic.
PL TrustZone Extension
The AXI TrustZone signals are routed to the PL to extend the secure environment to the PL. The secure (encrypted) configure frame files are designed for the PL to be as secure as any other secure element in the PMC.
PL to PSX AXI Interfaces
The security state of the PL to PSX AXI interfaces is provided by the PL and can be downgraded to non-secure.