Request for Reference Documentation for SE052 Security IC with Raspberry Pi CM5

[urvisha]

Dear NXP Support Team,

We are currently developing a custom PCB for our project, in which we are using the NXP SE052 Security IC for secure communication and secure storage of certificates.

Our host platform is the Raspberry Pi Compute Module 5 (CM5). We would like to understand the proper integration method and software support required to interface the SE052 security IC with the CM5 platform.

Could you please provide the following:

1. Reference documentation or application notes for integrating the SE052 Security IC with Raspberry Pi platforms (especially CM5).

2. Any available reference design, hardware schematics, or recommended interface configuration (I2C / T=1 over I2C).

3. Software support details such as middleware, drivers, or examples compatible with Linux running on Raspberry Pi.

4. Any guidance or best practices for implementing secure certificate storage and secure communication using SE052 with embedded Linux systems.

Your guidance and relevant documentation will help us correctly implement the SE052 in our custom hardware design.

Thank you for your support.

Best regards,

Urvisha Andani

[Kan_Li]

Hi @urvisha ,

Please kindly refer to the following for details:

Reference documentation or application notes for integrating the SE052 Security IC with Raspberry Pi platforms (especially CM5).
Get started with EdgeLock SE05x support package 

EdgeLock SE05x Quick start guide with Raspberry Pi 
Any available reference design, hardware schematics, or recommended interface configuration (I2C / T=1 over I2C).
OM-SE052ARD: Development Board for EdgeLock SE052F Secure Element | NXP Semiconductors 

https://www.nxp.com/webapp/Download?colCode=AN14262

Moving from EdgeLock SE050F to EdgeLock SE052F 

https://www.nxp.com/webapp/Download?colCode=UM11225
Software support details such as middleware, drivers, or examples compatible with Linux running on Raspberry Pi.

We have plug&trust MWs available :

Full version:

https://www.nxp.com/webapp/Download?colCode=SE05x-PLUG-TRUST-MW&appType=license
mini version:
GitHub - NXP/plug-and-trust: Plug & Trust middleware to use secure element SE050 · GitHub 
nano version:

GitHub - NXPPlugNTrust/nano-package · GitHub 

PKCS#11 support:
GitHub - NXPPlugNTrust/se05x-pkcs11: This is the pkcs11 Plugin Interface for Se05x using the mini-pk... 
Any guidance or best practices for implementing secure certificate storage and secure communication using SE052 with embedded Linux systems. 
1. securely storing certs inside the SE: Refer to demos from the MW:se05x_GetCertificate ,se05x_InjectCertificate  

2. Always enable platformSCP to secure communication between the host and SE.

Refer to chapter 5 of https://www.nxp.com/docs/en/application-note/AN12570.pdffordetails. SE052F has platformSCP enabled by default, so you just need to rotate the default keys to your own defined keys for the mass production.

The default keys can be found in https://www.nxp.com/docs/en/application-note/AN14277.pdf

Refer to the  rotation of Platform SCP03 keys demo from MW for details.

3. Use Development Boards + Adapter for Early Bring-Up

OM-SE052ARD: Development Board for EdgeLock SE052F Secure Element | NXP Semiconductors 

OM-SE050RPI Product Information | NXP Semiconductors 

Hope that helps,

Have a great day,
Kan

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!
- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------