topic Generate unique key by using EdgeLock Enclave Hardware Security Module (ele HSM) in i.MX Processors

Generate unique key by using EdgeLock Enclave Hardware Security Module (ele HSM)

Nivas_Pangarkar — Mon, 08 Apr 2024 11:01:30 GMT

Hi Team,

I'm using with yocto linux with kernel version 6.1.1. I want to generate unique key to use in application

I've read about ele HSM, but not able to achieve this. How can i generate this key? How to read this key in command line or in userspace ?
Also, could you please share uboot and kernel configuration with dts changes?

Can anyone help me with this?

Re: Generate unique key by using EdgeLock Enclave Hardware Security Module (ele HSM)

Harvey021 — Mon, 15 Apr 2024 06:40:02 GMT

Hi,

Hope this lf-6.6.3_1.0.0/test/hsm/hsm_test.c help for you, note that the private key cannot be read, instead, just used. Can you share more details of how you will use the key in your application?

Regards

Harvey

Re: Generate unique key by using EdgeLock Enclave Hardware Security Module (ele HSM)

Nivas_Pangarkar — Mon, 15 Apr 2024 08:47:10 GMT

Hi @Harvey021 , Thanks for response..

I want to use private key to encrypt partition. How can i use private key for same.
Also, What are uboot and kernel configuration changes required to use hsm key?

Regards,
Nivas

Re: Generate unique key by using EdgeLock Enclave Hardware Security Module (ele HSM)

pilotnite — Wed, 26 Jun 2024 17:58:12 GMT

@Harvey021

I'm in a similar situation here, except I want to use it for authentication with AWS IoT Core and the OTA system. I'm running an i.MX93 and I want to make use of ELE whenever I register my device with AWS IoT Core and the OTA system using public certificates. Do you have any how-to documentation that I can follow to set up and test this?

Cheers,