In the left panel, click /axi_noc2_N/ddrmc for the XTS controller. Check Enable XMPU. No GCM Encryption fields are required—XTS metadata is on-chip RAM only and requires no DRAM reservation. Click default under Subsystems. Click +Row to add a new access row. Rename the access row (for example, mem_xts). In the Destinations column, click the pen icon and select the XTS controller's DDR channel destination. Click OK. In the Access column, click the pen icon. Under Encryption select xts: Set num_keys to auto, for example. Set max_key_usage to 128M, for example. Set abs_max_key_usage to 200M, for example. Set Access Mode to read/write. Set Secure Mode to non-secure (or as required).