coresight_tmc_reg(mode, TMC_MODE);
 coresight_tmc_reg(pscr, TMC_PSCR);
 coresight_tmc_reg(axictl, TMC_AXICTL);
+coresight_tmc_reg(authstatus, TMC_AUTHSTATUS);
 coresight_tmc_reg(devid, CORESIGHT_DEVID);
 coresight_tmc_reg64(rrp, TMC_RRP, TMC_RRPHI);
 coresight_tmc_reg64(rwp, TMC_RWP, TMC_RWPHI);
        &dev_attr_devid.attr,
        &dev_attr_dba.attr,
        &dev_attr_axictl.attr,
+       &dev_attr_authstatus.attr,
        NULL,
 };
 
        return fwnode_property_present(dev->fwnode, "arm,scatter-gather");
 }
 
+static inline bool tmc_etr_has_non_secure_access(struct tmc_drvdata *drvdata)
+{
+       u32 auth = readl_relaxed(drvdata->base + TMC_AUTHSTATUS);
+
+       return (auth & TMC_AUTH_NSID_MASK) == 0x3;
+}
+
 /* Detect and initialise the capabilities of a TMC ETR */
 static int tmc_etr_setup_caps(struct device *parent, u32 devid, void *dev_caps)
 {
        u32 dma_mask = 0;
        struct tmc_drvdata *drvdata = dev_get_drvdata(parent);
 
+       if (!tmc_etr_has_non_secure_access(drvdata))
+               return -EACCES;
+
        /* Set the unadvertised capabilities */
        tmc_etr_init_caps(drvdata, (u32)(unsigned long)dev_caps);
 
 
 #define TMC_ITATBCTR2          0xef0
 #define TMC_ITATBCTR1          0xef4
 #define TMC_ITATBCTR0          0xef8
+#define TMC_AUTHSTATUS         0xfb8
 
 /* register description */
 /* TMC_CTL - 0x020 */
 #define TMC_DEVID_AXIAW_SHIFT  17
 #define TMC_DEVID_AXIAW_MASK   0x7f
 
+#define TMC_AUTH_NSID_MASK     GENMASK(1, 0)
+
 enum tmc_config_type {
        TMC_CONFIG_TYPE_ETB,
        TMC_CONFIG_TYPE_ETR,