Edgelock RW612 Zephyr

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Edgelock RW612 Zephyr

229 Views
benjaminaxiles
Contributor II

Hello,

I would like to store cetificates and private key in the edge lock secure enclave of the RW612.
My application is developed using zephyr and I need to be able to provision those certificates and read them at run time. Is this supported ? Could you provide documents / guides on how to do that.

I am currently using upstream Zephyr 4.2.0

Thanks.

0 Kudos
Reply
1 Reply

148 Views
RomanVR
NXP Employee
NXP Employee

Hello @benjaminaxiles, hope you are doing well.

Would you please provide more details on your expected application functionality to provision the certificates/private key? Are you expecting the provisioning to be done with an specific transport?

In the meantime, I suggest referring to the examples "zephyr/samples/tfm_integration/psa_crypto" and "modules/lib/nxp_iot_agent/zephyr/samples/el2go_agent", as these implement different approaches to key storage and provisioning, in particular, the "el2go_agent" example is meant to demonstrate how to use the Edgelock 2GO service to provision keys and certificates.

As a side note, I would suggest migrating to latest Zephyr downstream/upstream versions, as the support for RW612's security features has been modified since version 4.2.0.

Please let me know if this information is helpful.

Best Regards!
0 Kudos
Reply
%3CLINGO-SUB%20id%3D%22lingo-sub-2378833%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3EEdgelock%20RW612%20Zephyr%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2378833%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3E%3CP%3EHello%2C%3CBR%20%2F%3E%3CBR%20%2F%3EI%20would%20like%20to%20store%20cetificates%20and%20private%20key%20in%20the%20edge%20lock%20secure%20enclave%20of%20the%20RW612.%3CBR%20%2F%3EMy%20application%20is%20developed%20using%20zephyr%20and%20I%20need%20to%20be%20able%20to%20provision%20those%20certificates%20and%20read%20them%20at%20run%20time.%20Is%20this%20supported%20%3F%20Could%20you%20provide%20documents%20%2F%20guides%20on%20how%20to%20do%20that.%3CBR%20%2F%3E%3CBR%20%2F%3EI%20am%20currently%20using%20upstream%20Zephyr%204.2.0%3CBR%20%2F%3E%3CBR%20%2F%3EThanks.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2379710%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%20translate%3D%22no%22%3ERe%3A%20Edgelock%20RW612%20Zephyr%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2379710%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3E%3CP%3EHello%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fcommunity.nxp.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F249745%22%20target%3D%22_blank%22%3E%40benjaminaxiles%3C%2FA%3E%2C%20hope%20you%20are%20doing%20well.%3C%2FP%3E%0A%3CP%3EWould%20you%20please%20provide%20more%20details%20on%20your%20expected%20application%20functionality%20to%20provision%20the%20certificates%2Fprivate%20key%3F%20Are%20you%20expecting%20the%20provisioning%20to%20be%20done%20with%20an%20specific%20transport%3F%3C%2FP%3E%0A%3CP%3EIn%20the%20meantime%2C%20I%20suggest%20referring%20to%20the%20examples%20%22zephyr%2Fsamples%2Ftfm_integration%2Fpsa_crypto%22%20and%20%22modules%2Flib%2Fnxp_iot_agent%2Fzephyr%2Fsamples%2Fel2go_agent%22%2C%20as%20these%20implement%20different%20approaches%20to%20key%20storage%20and%20provisioning%2C%20in%20particular%2C%20the%20%22el2go_agent%22%20example%20is%20meant%20to%20demonstrate%20how%20to%20use%20the%20Edgelock%202GO%20service%20to%20provision%20keys%20and%20certificates.%3C%2FP%3E%0A%3CP%3EAs%20a%20side%20note%2C%20I%20would%20suggest%20migrating%20to%20latest%20Zephyr%20downstream%2Fupstream%20versions%2C%20as%20the%20support%20for%20RW612's%20security%20features%20has%20been%20modified%20since%20version%204.2.0.%3C%2FP%3E%0A%3CP%3EPlease%20let%20me%20know%20if%20this%20information%20is%20helpful.%3C%2FP%3E%3C%2FLINGO-BODY%3E