Storing secret key and preventing read access?

[sheng_cao]

I am using i.mx RT 1064, I want to store a secret key during manufacturing (possibly in the OCOTP), which can only be read by DCP, and cannot be read from firmware. Assuming that the firmware is NOT encrypted/signed, is this possible/ how would I achieve this?

[victorjimenez]

Hello sheng Cao, 

There isn't any available feature that allows only access from the DCP. After burning the SW_GP2_RLOCK, SW_GP2 only can be read by the BEE, could you share with me a detail explanation of why you need the key only can be accessed by the DCP? 

Best Regards, 

Victor 

[sheng_cao]

Hi,

I'm trying to securely store the private key which would uniquely identify a device for AWS IoT module. This key would be used by DCP for public key encryption.

Upon further reading, Would it be possible to store this secret key as OTPMK, let DCP access it this way?

[victorjimenez]

Hello sheng Cao, 

Please refer to the following application note: https://www.nxp.com/docs/en/application-note/AN12800.pdf  

Regards, 

Victor