MCUXpresso Secure Provisioning Tool (SEC) is a graphical user interface (GUI) tool covering secure boot process and Trust Provisioning capabilities, primarily aimed at microcontroller customers. It provides unified GUI front-end over existing command-line tools (elftosb, blhost, sdphost, cst, pfr, tpconfig, tphost).
Features
- Support for i.MX RT10xx, RT11xx, RT5xx and RT6xx families:
- RT1010, RT1015, RT1020, RT1024, RT1050, RT1060 and RT1064
- RT1171, RT1172, RT1173, RT1175, RT1176, RT1165, RT1166
- RT595S, RT555S, RT533S, RT685S, RT633S
- Support for LPC55Sxx and LPC55xx families:
- LPC55S6x, LPC55S2x, LPC55S1x and LPC55S0x
- LPC553x, LPC552x, LPC551x and LPC550x
- Conversion of ELF executables, SREC, HEX and raw binaries into bootable images files
- Credentials (keys, signatures and certificates) generation and management associated with signed/encrypted images
- Target device connection via UART, USB-HID, SPI and I2C
- Writing FlexSPI NOR, SEMC NAND or SD card boot device including configuration of the boot device parameters
- Use of DCD configuration for SDRAM images bootup
- Programming customizable eFuses per image and use case requirements
- Optional batch scripts generation for later use without the GUI
- Streamlined operation for general users
- Manufacturing tool with the support of parallel execution
- Trust provisioning and device HSM provisioninig for selected processors
- Flash programming GUI tool
- Detailed supported features for each processor in the user guide
Downloads
- To download the installer, please login to our download site via:
Supported Operating Systems:
- Microsoft(R) Windows(R) 10 (64-bit)
- Mac OS 11.6 Big Sur
- Ubuntu 22.04 LTS 64 bit, with "OpenSSL 1.1.1f 31 Mar 2020"; GNOME recommended
Revision History
5.0
- Added support for LPC55xx and LPC553x processors (non S)
- Added support for main menu > Tools > Flash Programmer
- Added support for trust provisioning using Smart Card for LPC55S0x/1x processors
- Added support for device HSM provisioning for i.MX RT6xx processors
- Added support for dual image (ping/pong) boot for i.MX RTxxx processors with OTP key source
- Legacy elftosb replaced by elftosb from SPSDK for i.MX RTxxx processors
- OTP Configuration moved from Write page to Build page
- "write_parameters.json" generated for write with parameters reused from build; CLI parameters updated
- Added support for burning fuses in SB file for i.MX RTxxx processors
- Added support for debug authentication for LPC55Sxx and i.MX RT5xx processors
- Added support for OTFAD encrypted boot mode with master key for i.MX RT1011 processor
- Added support for FlexSPI NAND boot for i.MX RT117x/RT116x processors
- Added support for localization, Manufacturing Tool localized to Chinese (see Preferences)
- Added "MX25U51245G_B" boot device configuration for i.MX RT600-AUD-EVK
- Command "main menu> File > Generate Scripts" removed, it was replaced by link on build and write views
- Integrated SPSDK 1.7 with the following highlighted changes:
- new tools: nxpimage and nxpcrypto
- elftosb: added support to burn fuses in SB file
Known problems and limitations
- Device HSM: USB connection in manufacturing does not work on Mac and Linux, because USB path is changed after processor reset
- See also chapter Troubleshooting in documentation