https://community.nxp.com/t5/i-MX-Processors/i-MX8-ULP-encrypted-update-shared-key-question/m-p/2050202#M234393 <P>My question keeps getting marked as spam for some reason.</P><P>I'm trying to understand best practice for securely updating a large number (thousands) of devices based on the i.MX8 ULP in the field.</P><P>I would like to encrypt the updates, but don't want to use separate key_blobs for every device.</P><P>Will either of these strategies work?</P><OL><LI>burn a shared key to fuses (I think this would be fuse bank 6 on the imx8ulp.&nbsp; Please confirm)</LI><LI>deliver a shared key to the devices that is encrypted with a SRK and install it in the kernel key ring with keyctl</LI></OL><P>How is this usually accomplished at scale?</P> Mon, 24 Feb 2025 19:38:10 GMT ddresser 2025-02-24T19:38:10Z https://community.nxp.com/t5/i-MX-Processors/i-MX8-ULP-encrypted-update-shared-key-question/m-p/2050202#M234393 <P>My question keeps getting marked as spam for some reason.</P><P>I'm trying to understand best practice for securely updating a large number (thousands) of devices based on the i.MX8 ULP in the field.</P><P>I would like to encrypt the updates, but don't want to use separate key_blobs for every device.</P><P>Will either of these strategies work?</P><OL><LI>burn a shared key to fuses (I think this would be fuse bank 6 on the imx8ulp.&nbsp; Please confirm)</LI><LI>deliver a shared key to the devices that is encrypted with a SRK and install it in the kernel key ring with keyctl</LI></OL><P>How is this usually accomplished at scale?</P> Mon, 24 Feb 2025 19:38:10 GMT https://community.nxp.com/t5/i-MX-Processors/i-MX8-ULP-encrypted-update-shared-key-question/m-p/2050202#M234393 ddresser 2025-02-24T19:38:10Z