MCUXpresso Secure Provisioning Tool

MCUXPRESSO-SECURE-PROVISIONING

Roll over image to zoom in

The MCUXpresso Secure Provisioning Tool is a GUI-based application provided to simplify generation and provisioning of bootable executables on NXP MCU devices.

The graphical interface provides a streamlined development flow, making it simpler to prepare, flash and fuse images while leveraging and providing access to existing utilities. Advanced scripting can be achieved using the command-line interface, while even more advanced secure provisioning flows can be accomplished by modifying scripts generated by the tool.

The latest releases of the Secure Provisioning Tool leverage low-level functionality based on the open-source Secure Provisioning SDK. The Secure Provisioning SDK (SPSDK) provides a unified software library replacing many of the existing security utilities to provide a solid feature-rich security foundation across the full range of supported devices. Additionally, the Secure Provisioning SDK is available in source form for the development of fully customized provisioning workflows. Full API documentation is available at the following link.

Smart Card Trust Provisioning and Device HSM Trust Provisioning are new security enablement of the MCUXpresso Secure Provisioning Tool for device provisioning and software IP protection.

Diagram

MCUXpresso Secure Provisioning Tool Block Diagram

MCUXpresso Secure Provisioning Tool Block Diagram
Get diagram PDF

Features

Graphical User Interface

  • Easy-to-use configuration of secure provisioning project settings
  • Enables direct communication with attached device for provisioning and programming
  • Supports generation of executable scripts for production use
  • Manufacturing mode for simplified production line use

Command-Line Interface

  • Unified command-line interface to the underlying utilities that can be used to create custom provisioning and production processing
  • Precompiled binaries utilities based on the Secure Provisioning SDK (SPSDK) are included with and leveraged by the Secure Provisioning Tool installation

Key/Certificate Management and Generation

  • Leverages OpenSSL or externally specified keys, signatures and certificates
  • OpenSSL libraries are pre-bundled with Windows ® and Mac installations for seamless installation
  • Enables Smart Card Trust Provisioning for device certificate generation and harvesting; keys and certificates are stored and deployed securely
  • Enables Device HSM Trust Provisioning for keys generation and secure provisioning

Secure Image Preparation

  • Encrypting and signing of ELF (AXF) executables, SREC and raw binaries
  • Generation of Secure Binary (SB.2 or SB.3) bootable images

Alignment with MCUXpresso Config Tools

  • Supports importing a device configuration data (DCD) in binary format that can be specified and generated from the MCUXpresso Config Tools. Used primarily for SEMC configuration
  • Support importing Arm ® TrustZone ® configuration files generated from the Trust Execution Environment setting of the MCUXpresso Config Tools. Used for Cortex ® -M33-based devices

Device Provisioning and Programming

  • Programming of e-FUSEs and one-time-programmable flash regions
  • Direct connection to the target via UART, USB-HID for provisioning and programming
  • Image flashing on FlexSPI NOR, SEMC NAND or SD card boot device including configuration of the boot device parameters
  • Manufacturing tool capabilities with device provisioning and parallel programming support
  • Supports Smart Card Trust Provisioning and Device HSM Trust Provisioning
  • Production limit control and factory audit log (available in Smart Card Trust Provisioning)

Secure Provisioning SDK

  • Unified, reliable and easy-to-use SW library supported across a range of NXP MCUs, providing strong secure provisioning foundation from quick customer prototyping up to production deployment
  • Open source code based on Python v3, released on GitHub with fully documented APIs and use case examples

Supported Devices

Downloads

Filters

1-5 of 18 downloads

  • Debugging and Visualization Tools

    MCUXpresso Secure Provisioning Tool V8, Mac OS Intel x86_64 packageFeatured

    PKGRev 8Jan 31, 2024 09:20:00153957 KBMCUXPRESSO-SPT-MAC-V8
    Sign in required
    Download
  • Debugging and Visualization Tools

    MCUXpresso Secure Provisioning Tool V8, Linux DEB packageFeatured

    DEBRev 8Jan 31, 2024 09:20:00250581 KBMCUXPRESSO-SPT-LINUX-V8
    Sign in required
    Download
  • Debugging and Visualization Tools

    MCUXpresso Secure Provisioning Tool V8, Mac AARCH OS package.Featured

    PKGRev 8Jan 31, 2024 09:20:00148583 KBMCUXPRESSO-SPT-MAC-AARCH-V8
    Sign in required
    Download
  • Debugging and Visualization Tools

    MCUXpresso Secure Provisioning Tool V8, Windows installerFeatured

    EXERev 8Jan 31, 2024 09:20:00199306 KBMCUXPRESSO-SPT-WIN-V8
    Sign in required
    Download
  • Application Example Software

    Restricted data package for SEC Tool v7.0

    Restricted data package for MCUXpresso Secure Provisioning Tool v7 with: - Fuses description for i.MX RT1xxx processors - Trust provisioning firmware for LPC55Sxx processors - Device HSM provisioning firmware for i.MX RT6xx and i.MX RT5xx processors
    ZIPRev 7.0Jul 19, 2023 20:39:001.1 MBSEC-TOOL-RESTRICTED-DATA-RT-7-0
    Sign in required
    Download
Show All

Note: For better experience, software downloads are recommended on desktop.

Documentation

Quick reference to our documentation types.

Filters

4 documents

Hardware

Filters

1-5 of 24 hardware offerings

Show All

Related Software

Filters

1-5 of 7 software files

Show All

Note: For better experience, software downloads are recommended on desktop.

Engineering Services

3 engineering services

To find a complete list of our partners that support this product, please see our Partner Marketplace.

Training

Filters

5 trainings

Support

What do you need help with?

  • Narrow your search
Search