Configuration (including boot or memory setup, crypto keys validating firmware, ...) also is sometimes in write-once fuses you can set from software.