MCUXpresso Secure Provisioning Tool

MCUXPRESSO-SECURE-PROVISIONING

Roll over image to zoom in

The MCUXpresso Secure Provisioning Tool is a GUI-based application provided to simplify generation and provisioning of bootable executables on NXP MCU devices.

The graphical interface provides a streamlined development flow, making it simpler to prepare, flash and fuse images while leveraging and providing access to existing utilities. Advanced scripting can be achieved using the command-line interface, while even more advanced secure provisioning flows can be accomplished by modifying scripts generated by the tool.

The latest releases of the Secure Provisioning Tool leverage low-level functionality based on the open-source Secure Provisioning SDK. The Secure Provisioning SDK (SPSDK) provides a unified software library replacing many of the existing security utilities to provide a solid feature-rich security foundation across the full range of supported devices. Additionally, the Secure Provisioning SDK is available in source form for the development of fully customized provisioning workflows. Full API documentation is available at the following link.

Smart Card Trust Provisioning and Device HSM Trust Provisioning are new security enablement of the MCUXpresso Secure Provisioning Tool for device provisioning and software IP protection.

Diagram

MCUXpresso Secure Provisioning Tool Block Diagram

MCUXpresso Secure Provisioning Tool Block Diagram
Get diagram PDF

Features

Graphical User Interface

  • Easy-to-use configuration of secure provisioning project settings
  • Enables direct communication with attached device for provisioning and programming
  • Supports generation of executable scripts for production use
  • Manufacturing mode for simplified production line use

Command-Line Interface

  • Unified command-line interface to the underlying utilities that can be used to create custom provisioning and production processing
  • Precompiled binaries utilities based on the Secure Provisioning SDK (SPSDK) are included with and leveraged by the Secure Provisioning Tool installation

Key/Certificate Management and Generation

  • Leverages OpenSSL or externally specified keys, signatures and certificates
  • OpenSSL libraries are pre-bundled with Windows ® and Mac installations for seamless installation
  • Enables Smart Card Trust Provisioning for device certificate generation and harvesting; keys and certificates are stored and deployed securely
  • Enables Device HSM Trust Provisioning for keys generation and secure provisioning

Secure Image Preparation

  • Encrypting and signing of ELF (AXF) executables, SREC and raw binaries
  • Generation of Secure Binary (SB.2 or SB.3) bootable images

Alignment with MCUXpresso Config Tools

  • Supports importing a device configuration data (DCD) in binary format that can be specified and generated from the MCUXpresso Config Tools. Used primarily for SEMC configuration
  • Support importing Arm ® TrustZone ® configuration files generated from the Trust Execution Environment setting of the MCUXpresso Config Tools. Used for Cortex ® -M33-based devices

Device Provisioning and Programming

  • Programming of e-FUSEs and one-time-programmable flash regions
  • Direct connection to the target via UART, USB-HID and CAN for provisioning and programming
  • Image flashing on FlexSPI NOR, SEMC NAND or SD card boot device including configuration of the boot device parameters
  • Manufacturing tool capabilities with device provisioning and parallel programming support
  • Supports Smart Card Trust Provisioning and Device HSM Trust Provisioning
  • Production limit control and factory audit log (available in Smart Card Trust Provisioning)

Secure Provisioning SDK

  • Unified, reliable and easy-to-use SW library supported across a range of NXP MCUs, providing strong secure provisioning foundation from quick customer prototyping up to production deployment
  • Open source code based on Python v3, released on GitHub with fully documented APIs and use case examples

Supported Devices

Downloads

Quick reference to our software types.
Filters

1-5 of 19 downloads

  • Code Snippets

    Restricted data package for MCUXpresso Secure Provisioning Tool v10Featurednew

    ZIPRev 10Nov 14, 2024 16:30:001.3 MBRESTRICTED_DATAV10
    Sign in required
    Download
  • Debugging and Visualization Tools

    MCUXpresso Secure Provisioning Tool v10, Linux DEB package for Ubuntu 24.04Featurednew

    DEBRev v10Nov 14, 2024 13:18:00380159 KBMCUXPRESSO-SECURE-PROVISIONING-V10-1_AMD64
    Sign in required
    Download
  • Debugging and Visualization Tools

    MCUXpresso Secure Provisioning Tool v10, Mac OS Intel x86_64 packageFeaturednew

    PKGRev v10Nov 14, 2024 13:18:00262970 KBMCUXPRESSO_SECURE_PROVISIONING_V10PKG
    Sign in required
    Download
  • Debugging and Visualization Tools

    MCUXpresso Secure Provisioning Tool v10 for Windows installerFeaturednew

    EXERev v10Nov 14, 2024 13:18:00314423 KBMCUXPRESSO_SECURE_PROVISIONING_V10EXE
    Sign in required
    Download
  • Debugging and Visualization Tools

    MCUXpresso Secure Provisioning Tool v10, Mac AARCH OS packageFeaturednew

    PKGRev v10Nov 14, 2024 13:18:00260557 KBMCUXPRESSO_SECURE_PROVISIONING_V10-AARCH64
    Sign in required
    Download
Show All

Note: For better experience, software downloads are recommended on desktop.

Documentation

Quick reference to our documentation types.

Filters

4 documents

Hardware

Quick reference to our board types.
Filters

1-5 of 27 hardware offerings

Show All

Related Software

Quick reference to our software types.

Filters

1-5 of 7 software files

Show All

Note: For better experience, software downloads are recommended on desktop.

Engineering Services

3 engineering services

To find a complete list of our partners that support this software, please see our Partner Marketplace.

Training

Filters

5 trainings

Support

What do you need help with?

  • Narrow your search
Search