Secure Provisioning SDK (SPSDK)

SPSDK

Roll over image to zoom in

NXP provides MCUXpresso Secure Provisioning (SEC) and Secure Provisioning SDK (SPSDK) for trial run and mass production use. Both SEC tool and SPSDK support secure programming and device provisioning on NXP’s microcontrollers and i.MX 9 applications processors at the production stage.

MCUXpresso Secure Provisioning (SEC) tool is a GUI-based tool, which leverages low-level functionality of the open source SPSDK with its binary executables released as part of the SEC tool. The SEC tool graphical interface makes production flow simpler for the general needs of a production process.

Secure Provisioning SDK (SPSDK) is an open source development kit with its source code released on GitHub and PyPI. It contains a set of API modules for custom production tool development, which requires a more advanced secure provisioning flow. SPSDK enables connection and communication with NXP’s microcontrollers and i.MX 9 applications processors for the following purposes:

  • Generation of Secure Binary (SB) and Advanced High Assurance Boot (AHAB) bootable images
  • Security features configuration (CMPA, CFPA, Trustzone, secure bootloader, debug authentication, and so on)
  • Generation and management of cryptographic keys and certificates
  • Trust provisioning and secure programming
  • Debug authentication through J-Link, PEmicro and PyOCD debug probes

Additionally, SPSDK includes Rapid blhost (rblhost) , a flash programming tool for NXP processors over I2C, USB and UART. It works like the original blhost and supports both C/C++ and Python on different systems.

Diagram

Secure Provisioning SDK Block Diagram

Secure Provisioning SDK Block Diagram

Features

Trust Provisioning

Protected Flash Region (PFR) / Flash Information Register (IFR)

  • Generation and parsing of PFR/IFR data including CMPA and CFPA
  • Boot configuration
  • Debug configuration
  • Code encryption configuration

Crypto

  • Secret keys generation
  • Generation of X.509 digital certificates including self-signed certificates
  • Verification of digital certificates and signatures

Master Boot Image

  • Master Boot image generation

Secure Binary File

  • Generation of Secure Binary (SB) and Advanced High Assurance Boot (AHAB) bootable images
  • Support SB.2, SB.3, SB.4 and AHAB secure binary formats

Bootloader Protocol

  • Interacts with the on-chip ROM bootloader via I2C, SPI and CAN interfaces

Serial Download Protocol (SDP)

  • Download an image to a microcontroller over USB and UART serial connection

Debugger (Debug Mailbox) and Debug Authentication

  • Debug interface access control
  • Allow access to select parts of firmware and hardware with authorization

Supported Devices

Downloads

Quick reference to our software types.
Filters

5 downloads

  • Software Development Resources

    SPSDK (main release) PyPIFeatured

    EXTERNALRev 3.xAug 29, 2025 10:07:00SPSDK-PYPI-LINK
    Download
  • Software Development Resources

    SPSDK (main release) GitHubFeatured

    EXTERNALRev 3.xAug 29, 2025 10:12:00SPSDK-GITHUB
    Download
  • BSPs and Device Drivers

    SPSDK Plugins PyPI

    EXTERNALRev 3.xAug 29, 2025 09:24:00SPSDK-PLUGIN-PyPI
    Download
  • BSPs and Device Drivers

    Rapid blhost (rblhost)new

    EXTERNALRev 0.xOct 10, 2025 11:24:00SPSDK-RBLHOST
    Download
  • Software Development Resources

    SPSDK Plugins GitHub

    EXTERNALRev 3.xAug 29, 2025 11:01:00SPSDK-PLUGIN-GITHUB
    Download

Note: For better experience, software downloads are recommended on desktop.

Documentation

Quick reference to our documentation types

Filters

2 documents

Compact List

Design Resources

Hardware

Quick reference to our board types.
Filters

1-5 of 50 hardware offerings

Show All

Related Software

Quick reference to our software types.

Filters

1-5 of 8 software files

Show All

Note: For better experience, software downloads are recommended on desktop.

Training

Filters

1 trainings

Support

What do you need help with?

Search