What is "Secure Box version"?

[djdirkj]

The GetVersion-APDU in AN12413 specification defines "VersionInfo" with a 2-byte "Secure Box version". There is no definition as to what is exactly is.

Why do I need this information?

I'm in the middle of a certification of a product with a notified body. This product uses a SE050 for certain security features and this is part of the certification since the SE050 also contains a form of firmware. 

[Kan_Li]

Hi @djdirkj ,

Please record the Secure Box version as part of the SE050 software/configuration evidence, but do not try to interpret it independently unless NXP provides a controlled definition; for certification, the full GetVersion / se05x_GetInfo output is the stronger traceability artifact.

Have a great day,
Kan

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!
- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------

[djdirkj]

Hi @Kan_Li ,

thank you for your response!

Let me rephrase the question:

I have a reel of about 500 SE050A2 components at our EMS. If I produce 500 products with these SE050, how can I be sure that every SE050 is exactly the same?

If there is a difference in the SE050 it does not adhere to the certificate and it needs amendments to the certificate. I hope you understand that this is not desirable.

[Kan_Li]

Hi @djdirkj ,

Please do not try to prove that all SE050A2 chips are literally identical; prove that they have the same OEF ID, platform build ID, OS patch level, applet version, and feature configuration, while recording unique serial/batch data for traceability.

Have a great day,
Kan

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!
- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------

[djdirkj]

Hi @Kan_Li ,

thank you for your timely reply, I appreciate it.

Can you confirm that every SE050A2 has the same:

OEF ID, platform build ID, OS patch level, applet version, and feature configuration.

And if we order a new batch, this does not change.

This is all I need to know regarding this topic.

Kind regards,

Dirk Jan

[Kan_Li · Accepted solution]

Hi @djdirkj ,

Yes, all these parameters are static on SE050A.

Have a great day,
Kan

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!
- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------