Secure Provisioning SDK (SPSDK)

SPSDK

Roll over image to zoom in

NXP provides MCUXpresso Secure Provisioning (SEC) and Secure Provisioning SDK (SPSDK) for trial run and mass production use. Both SEC tool and SPSDK support secure programming and device provisioning on NXP’s microcontrollers and i.MX 9 applications processors at the production stage.

MCUXpresso Secure Provisioning (SEC) tool is a GUI-based tool which leverages low-level functionality of the open-source SPSDK with its binary executables released as part of the SEC tool. The SEC tool graphical interface makes production flow simpler for general needs of a production process.

Secure Provisioning SDK (SPSDK) is an open-source development kit with its source code released on Github and PyPI. It contains a set of API modules for custom production tool development which requires more advanced secure provisioning flow. SPSDK enables connection and communication with NXP’s microcontrollers and i.MX 9 applications processors for the following purposes:

  • Generation of Secure Binary (SB) bootable images
  • Security features configuration (CMPA, CFPA, Trustzone, secure bootloader, debug authentication, etc.)
  • Generation and management of cryptographic keys and certificates
  • Trust provisioning and secure programming
  • Debug authentication through J-Link, PEmicro and PyOCD debug probes

Diagram

Secure Provisioning SDK Block Diagram

Secure Provisioning SDK Block Diagram
Get diagram PDF

Features

Trust Provisioning

Protected Flash Region (PFR) / Flash Information Register (IFR)

  • Generation and parsing of PFR/IFR data including CMPA and CFPA
  • Boot configuration
  • Debug configuration
  • Code encryption configuration

Crypto

  • Secret keys generation
  • Generation of X.509 digital certificates including self-signed certificates
  • Verification of digital certificates and signatures

Master Boot Image

  • Master Boot image generation

Secure Binary File

  • Generation of Secure Binary (SB) bootable images
  • Support SB.2 and SB.3 secure binary formats

Bootloader Protocol

  • Interacts with the on-chip ROM bootloader via I2C, SPI and CAN interfaces

Serial Download Protocol (SDP)

  • Download an image to a microcontroller over USB and UART serial connection

Debugger (Debug Mailbox) and Debug Authentication

  • Debug interface access control
  • Allow access to select parts of firmware and hardware with authorization

Supported Devices

Downloads

Quick reference to our software types.
Filters

1-5 of 12 downloads

  • Software Development Resources

    SPSDK (main release) PyPIFeatured

    EXTERNALRev 2.4Nov 15, 2024 10:07:00SPSDK-PYPI-LINK
    Download
  • Software Development Resources

    SPSDK (main release) GitHubFeatured

    EXTERNALRev 2.4Nov 15, 2024 10:12:00SPSDK-GITHUB
    Download
  • Software Development Resources

    Restricted Data Package for SPSDK v2.4Featuredupdated

    NDA required access for additional functionalities and preliminary information.
    ZIPRev 2.4Nov 16, 2024 16:00:0065.4 KBSPSDK-RESTRICTED-DATA-PK
    Account Required
    Download
  • Software Development Resources

    PyOCD Plugin PyPI

    URLRev 0.2.xOct 11, 2024 12:19:00PYOCD-PLUGIN-PYPI
    Download
  • Software Development Resources

    Pylint Plugin PyPI

    URLRev 0.1.xJun 13, 2024 12:19:00PYLINT-PLUGIN-PYPI
    Download
Show All

Note: For better experience, software downloads are recommended on desktop.

Documentation

Quick reference to our documentation types.

Filters

2 documents

Hardware

Quick reference to our board types.
Filters

1-5 of 44 hardware offerings

Show All

Related Software

Quick reference to our software types.

Filters

1-5 of 8 software files

Show All

Note: For better experience, software downloads are recommended on desktop.

Training

Filters

1 trainings

Support

What do you need help with?

Search