Introduction
The MCUXpresso Secure Provisioning Tool (SEC) is a graphical user interface (GUI) tool designed to simplify the creation and provisioning of secure bootable executables for NXP MCU platforms. It leverages NXP's robust security enablement toolset and the capabilities of the BootROM. This tool offers an intuitive interface for preparing, flashing, and fusing images, providing access to features previously available through command-line utilities like sdphost, blhost, elftosb, cst, and image_enc. Experienced users can further customize secure provisioning workflows by modifying the scripts generated by the tool.
Key Features
- Support for various target connectivity modes including UART and USB-HID.
- Automated conversion of bare images into bootable images.
- Customization of boot device configurations via GUI or predefined Flash Configuration Blocks.
- Generation of certificate trees for image signing and encryption, or utilization of user-supplied certificates.
- Support for both development (unsigned) and authenticated (signed) boot types, including encryption.
- Advanced OTP/PFR configuration options.
- Command-line interface for advanced customization of boot flows.
- Compatibility with Windows, Linux, and macOS operating systems.
- Integration with popular IDEs such as MCUXpresso IDE, Keil MDK 5, and IAR Embedded Workbench.
System Requirements
To run the MCUXpresso Secure Provisioning Tool, the following minimum system requirements are recommended:
- Microsoft Windows 10 (64-bit)
- macOS (10.14.6, 10.15, or later)
- Ubuntu 20.04 LTS (64-bit) with GNOME and OpenSSL 1.1.1
- 4GB RAM
- Display resolution of 1024 x 768 or higher
Supported Devices
The tool supports a wide range of NXP processors, including the LPC55Sxx and MIMXRT families, with various boot types such as Unsigned, CRC, Signed/Authenticated, and Encrypted (XIP and non-XIP). Refer to the detailed tables within the document for specific processor and feature compatibility.
Workflows and Operations
This guide details various workflows for different NXP processor families, including common steps, device-specific procedures, and flowchart examples. It also covers command-line operations for building, writing, generating keys, and manufacturing processes. For more information on NXP's security solutions, visit NXP Semiconductors.
