MCUXpresso Secure Provisioning v5 Now Available

Showing results for 
Search instead for 
Did you mean: 

MCUXpresso Secure Provisioning v5 Now Available

NXP Employee
NXP Employee

MCUXpresso Secure Provisioning Tool (SEC) is a graphical user interface (GUI) tool covering secure boot process and Trust Provisioning capabilities, primarily aimed at microcontroller customers. It provides unified GUI front-end over existing command-line tools (elftosb, blhost, sdphost, cst, pfr, tpconfig, tphost).


  • Support for i.MX RT10xx, RT11xx, RT5xx and RT6xx families:
    • RT1010, RT1015, RT1020, RT1024, RT1050, RT1060 and RT1064
    • RT1171, RT1172, RT1173, RT1175, RT1176, RT1165, RT1166
    • RT595S, RT555S, RT533S, RT685S, RT633S
  • Support for LPC55Sxx and LPC55xx families:
    • LPC55S6x, LPC55S2x, LPC55S1x and LPC55S0x
    • LPC553x, LPC552x, LPC551x and LPC550x
  • Conversion of ELF executables, SREC, HEX and raw binaries into bootable images files
  • Credentials (keys, signatures and certificates) generation and management associated with signed/encrypted images
  • Target device connection via UART, USB-HID, SPI and I2C
  • Writing FlexSPI NOR, SEMC NAND or SD card boot device including configuration of the boot device parameters
  • Use of DCD configuration for SDRAM images bootup
  • Programming customizable eFuses per image and use case requirements
  • Optional batch scripts generation  for later use without the GUI
  • Streamlined operation for general users
  • Manufacturing tool with the support of parallel execution
  • Trust provisioning and device HSM provisioninig for selected processors
  • Flash programming GUI tool
  • Detailed supported features for each processor in the user guide


Supported Operating Systems:

  • Microsoft(R) Windows(R) 10 (64-bit)
  • Mac OS 11.6 Big Sur
  • Ubuntu 22.04 LTS 64 bit, with "OpenSSL 1.1.1f 31 Mar 2020"; GNOME recommended

Revision History


  • Added support for LPC55xx and LPC553x processors (non S)
  • Added support for main menu > Tools > Flash Programmer
  • Added support for trust provisioning using Smart Card for LPC55S0x/1x processors
  • Added support for device HSM provisioning for i.MX RT6xx processors
  • Added support for dual image (ping/pong) boot for i.MX RTxxx processors with OTP key source
  • Legacy elftosb replaced by elftosb from SPSDK for i.MX RTxxx processors
  • OTP Configuration moved from Write page to Build page
  • "write_parameters.json" generated for write with parameters reused from build; CLI parameters updated
  • Added support for burning fuses in SB file for i.MX RTxxx processors
  • Added support for debug authentication for LPC55Sxx and i.MX RT5xx processors
  • Added support for OTFAD encrypted boot mode with master key for i.MX RT1011 processor
  • Added support for FlexSPI NAND boot for i.MX RT117x/RT116x processors
  • Added support for localization, Manufacturing Tool localized to Chinese (see Preferences)
  • Added "MX25U51245G_B" boot device configuration for i.MX RT600-AUD-EVK
  • Command "main menu> File > Generate Scripts" removed, it was replaced by link on build and write views
  • Integrated SPSDK 1.7 with the following highlighted changes:
    • new tools: nxpimage and nxpcrypto
    • elftosb: added support to burn fuses in SB file

Known problems and limitations

  • Device HSM: USB connection in manufacturing does not work on Mac and Linux, because USB path is changed after processor reset
  • See also chapter Troubleshooting in documentation
0 Replies