MCUXpresso Secure Provisioning Tool

Overview

The MCUXpresso Secure Provisioning Tool is a GUI-based application provided to simplify generation and provisioning of bootable executables on NXP MCU devices.

The graphical interface provides a streamlined development flow, making it simpler to prepare, flash, and fuse images while leveraging and providing access to existing utilities. Advanced scripting can be achieved using the command-line interface, while even more advanced secure provisioning flows can be accomplished by modifying scripts generated by the tool.

The latest releases of the Secure Provisioning Tool leverage low-level functionality based on the opensource Secure Provisioning SDK. The Secure Provisioning SDK (SPSDK) provides a unified software library replacing many of the existing security utilities to provide a solid feature-rich security foundation across the full range of supported devices. Additionally, the Secure Provisioning SDK is available in source form for the development of fully customized provisioning workflows. Full API documentation is available at the following link.

The MCUXpresso Secure Provisioning Tool currently includes support for devices within the i.MX RT crossover MCU series and the LPC5500 MCU series.

MoreLess

Features

Graphical User Interface

Easy-to-use configuration of secure provisioning project settings
Enables direction communication with attached device for provisioning and programming
Supports generation of executable scripts for production use

Command-line Interface

Unified command-line interface to the underlying utilities that can be used to create custom provisioning and production processing
Precompiled binaries utilities based on the Secure Provisioning SDK are included with and leveraged by the Secure Provisioning Tool installation

Key/Certificate Management and Generation

Leverages OpenSSL or externally specified keys, signatures and certificates
OpenSSL libraries are pre-bundled with Windows^® and Mac installations for seamless installation

Secure Image Preparation

Encrypting and signing of ELF (AXF) executables, SREC and raw binaries

Alignment with MCUXpresso Config Tools

Supports importing a DCD (Device Configuration Data) in binary form that can be specified and generated from the MCUXpresso Config Tools. Used primarily for SEMC configuration
Support importing Arm^® TrustZone^® configuration files generated from the Trust Execution Environment setting of the MCUXpresso Config Tools. Used for Cortex^®-M33-based devices

Device Provisioning and Programming

Programming of e-FUSEs and One-Time-Programmable flash regions
Direct connection to the target via UART, USB-HID for provisioning and programming
Image flashing on FlexSPI NOR, SEMC NAND or SD card boot device including configuration of the boot device parameters

Secure Provisioning SDK

Unified, reliable, and easy to use SW library supported across a range of NXP MCUs, providing strong secure provisioning foundation from quick customer prototyping up to production deployment
Open source code based on Python v3, released on GitHub with fully documented APIs and use case examples

MoreLess

Features

Graphical User Interface

Easy-to-use configuration of secure provisioning project settings
Enables direction communication with attached device for provisioning and programming
Supports generation of executable scripts for production use

Command-line Interface

Unified command-line interface to the underlying utilities that can be used to create custom provisioning and production processing
Precompiled binaries utilities based on the Secure Provisioning SDK are included with and leveraged by the Secure Provisioning Tool installation

Key/Certificate Management and Generation

Leverages OpenSSL or externally specified keys, signatures and certificates
OpenSSL libraries are pre-bundled with Windows^® and Mac installations for seamless installation

Secure Image Preparation

Encrypting and signing of ELF (AXF) executables, SREC and raw binaries

Alignment with MCUXpresso Config Tools

Supports importing a DCD (Device Configuration Data) in binary form that can be specified and generated from the MCUXpresso Config Tools. Used primarily for SEMC configuration
Support importing Arm^® TrustZone^® configuration files generated from the Trust Execution Environment setting of the MCUXpresso Config Tools. Used for Cortex^®-M33-based devices

Device Provisioning and Programming

Programming of e-FUSEs and One-Time-Programmable flash regions
Direct connection to the target via UART, USB-HID for provisioning and programming
Image flashing on FlexSPI NOR, SEMC NAND or SD card boot device including configuration of the boot device parameters

Secure Provisioning SDK

Unified, reliable, and easy to use SW library supported across a range of NXP MCUs, providing strong secure provisioning foundation from quick customer prototyping up to production deployment
Open source code based on Python v3, released on GitHub with fully documented APIs and use case examples

User Guide

Download

MCUXpresso Secure Provisioning Tool Block Diagram

MCUXpresso Secure Provisioning Tool Block Diagram

MCUXpresso Secure Provisioning Tool Block Diagram

Previous Next

Supported Devices

i.MX-RT1170: i.MX RT1170 Crossover MCU Family - First GHz MCU with Arm^® Cortex^®-M7 and Cortex-M4 Cores
i.MX-RT1064: i.MX RT1064 Crossover MCU with Arm^® Cortex^®-M7 Core
i.MX-RT1060: i.MX RT1060 Crossover MCU with Arm^® Cortex^®-M7 Core
i.MX-RT1050: i.MX RT1050 Crossover MCU with Arm^® Cortex^®-M7 Core
i.MX-RT1020: i.MX RT1020 Crossover MCU with Arm^® Cortex^®-M7 Core
i.MX-RT1015: i.MX RT1015 Crossover MCU with Arm^® Cortex^®-M7 Core
i.MX-RT500: i.MX RT500 Crossover MCU with Arm^® Cortex^®-M33, DSP and GPU Cores
i.MX-RT600: i.MX RT600 Crossover MCU with Arm^® Cortex^®-M33 and DSP Cores
LPC552x-S2x: LPC552x/S2x: Mainstream Arm^® Cortex^®-M33-based Microcontroller Family
LPC551X-S1X: LPC551x/S1x: Baseline Arm^® Cortex^®-M33-Based Microcontroller Family
LPC550x: LPC550x/S0x: Baseline Arm^® Cortex^®-M33-Based Microcontroller Family
LPC55S6x: High Efficiency Arm^® Cortex^®-M33-Based Microcontroller Family