MCUXpresso Secure Provisioning documentation

This page contains documentation for the MCUXpresso Secure Provisioning Tool (SEC)

User Guide

• Introduction
• Features
• Terms and definitions
• Installation
  • Minimum system requirements
  • Windows
    • Windows CLI
  • MacOS
    • Enabling USB connection on MacOS
  • Linux
  • Uninstalling
    • Windows
    • MacOS
    • Linux
    • Remove configuration files
    • Remove restricted data
• User interface
  • Menu and settings
    • Title of the Main Window
    • Menu bar
    • Preferences
    • Workspaces
    • Toolbar
    • Connection
    • Boot memory configuration
    • Trust provisioning
    • Debug Probe Selection dialog
  • Build image
    • Generated files
    • Build script hooks
    • Source image formats
    • Additional images
    • Firmware versions
    • XMCD configuration dialog
    • TrustZone configuration file
    • OTP/PFR/IFR/BCA/FCF configuration
  • Write image
    • Manufacturing package
  • PKI management
    • Generate keys
    • Add keys
    • Re-generate certificate
    • Import/Export keys
    • Keys for smart card
    • Debug authentication
    • Signature provider
  • Smart card management
    • Smart card configuration
    • Manufacturing package
    • Factory audit logs
  • Log
  • Manufacturing Tool
    • USB path
  • Flash Programmer
  • SB editor
    • SB editor contains the following main UI parts:
    • File type
    • Properties view
    • Commands view
    • $ Variables
    • Validation
    • Creating a manufacturing package button
    • To Manufacturing button
  • Merge Tool
• Processor-specific workflows
  • Common steps
    • Downloading MCUXpresso SDK
    • Opening example project
    • Building example project
    • Setting up Secure Provisioning Tool
    • Preparing secure keys
  • i.MX 9x device workflow
    • Preparing images for build for i.MX 9x devices
    • Connecting the board for i.MX 9x devices
    • Booting images for i.MX 9x devices
  • KW45xx/K32W1xx/MCXW71xx device workflow
    • Preparing source image for KW45xx/K32W1xx/MCXW71xx devices
    • Connecting the board for KW45xx/K32W1xx/MCXW71xx devices
    • Booting images for KW45xx/K32W1xx/MCXW71xx devices
  • KW47xx/MCXW727x device workflow
    • Preparing source image for KW47xx/MCXW727x devices
    • Connecting the board for KW47xx/MCXW727x devices
    • Booting images for KW47xx/MCXW727x devices
  • LPC55(S)0x/1x/2x/6x device workflow
    • Preparing source image for LPC55(S)0x/1x/2x/6x devices
    • Connecting the board for LPC55(S)0x/1x/2x/6x devices
    • Booting images for LPC55(S)0x/1x/2x/6x devices
  • LPC55(S)3x device workflow
    • Preparing source image for LPC55(S)3x devices
    • Connecting the board for LPC55(S)3x devices
    • Booting images for LPC55(S)3x devices
  • LPC865 workflow
    • Preparing images for build for LPC865
    • Connecting the board for LPC865
    • Booting images for LPC865
    • Life cycles
  • MC56F818xx/7xx/6xx and MWCT2xD2/12 devices workflow
    • Preparing source image for MC56F818xx/7xx/6xx and MWCT2xD2/12 devices
    • Connecting the board for MC56F818xx/7xx/6xx and MWCT2xD2/12 devices
    • Booting images for MC56F818xx/7xx/6xx and MWCT2xD2/12 devices
  • MCX A14x/A15x device workflow
    • Preparing source image for MCX A14x/A15x devices
    • Connecting the board
    • Booting images MCX A14x/A15x devices
    • Life cycle for MCX A14x/A15x devices
  • MCX C041/C242/C444 device workflow
    • Preparing source image for MCX C041/C242/C444 devices
    • Connecting the board for MCX C041/C242/C444 devices
    • Booting images for MCX C041/C242/C444 devices
  • MCX Nx4x/N23x device workflow
    • Preparing source image for MCX Nx4x/N23x devices
    • Connecting the board for MCX Nx4x/N23x devices
    • Booting images for MCX Nx4x/N23x devices
  • RT10xx/RT116x/RT117x device workflow
    • Preparing source image for RT10xx/RT116x/RT117x devices
    • Connecting the board for RT10xx/RT116x/RT117x devices
    • Booting images for RT10xx/RT116x/RT117x devices
    • Creating/Customizing DCD files
  • RT118x device workflow
    • Preparing source image for RT118x devices
    • Connecting the board for RT118x devices
    • Booting images for RT118x devices
  • RT5xx/6xx device workflow
    • Preparing source image RT5xx/6xx devices
    • Connecting the board for RT5xx/6xx devices
    • Booting images for RT5xx/6xx devices
  • RT7xx device workflow
    • Preparing source image for RT7xx devices
    • Connecting the board for RT7xx devices
    • Booting images for RT7xx devices
  • RW61x device workflow
    • Preparing source image for RW61x devices
    • Connecting the board for RW61x devices
    • Shadow registers for fuses via debug probe
    • Booting images for RW61x devices
• Generic workflows
  • Smart card trust provisioning workflow
    • Preparation of OEM-specific inputs
    • Configuration of smart card at OEM
    • Testing the OEM configuration
    • Preparation of the final data for factory
    • Factory: Manufacturing process
    • Audit log verification at OEM side
    • Device identity and cloud service provider registration
    • Performance optimizations
  • Debug authentication workflow
    • Example of access rights to debug domains
  • Signature provider workflow
    • Run the server
  • Script hooks
    • Build script hooks
    • Write script hooks
    • Manufacturing hooks
    • Typical usage
  • Manufacturing workflow
    • Create manufacturing package
    • Performance optimization
    • Manufacturing operations
  • MCUboot workflow
  • EdgeLock 2GO Trust Provisioning workflow
    • EdgeLock 2GO flow, high-level description
    • EdgeLock 2GO flow, step by step
    • API key to access EdgeLock 2GO server
  • Merge Images Tool workflow for MIMXRT595
• Command-line operations
  • Build
  • Write
  • Generate keys
  • Manufacture
  • Devices info
  • Environment variables in filepath-based arguments
  • Command-line examples
    • Example: How to build and write an image for configuration stored in the workspace folder
    • Example how to use args-file argument
  • Command-line tools
• Troubleshooting
  • Windows
  • Linux
  • macOS
  • i.MX RT5xx/6xx
  • i.MX RT1024
  • Debug probes
  • Debug authentication
  • Zephyr projects
  • Custom USB HID devices
• Revision history
• Note about the source code in the document

Release Notes

• Release Notes for MCUXpresso Secure Provisioning Tool
• Overview
• Supported processors
• Features
• System requirements
• Known issues and limitations
• What is new
  • Version 25.03.01, April 2025
  • Version 25.03, March 2025
  • Version 10.0, November 2024
  • Version 9.0.1, August 2024
  • Version 9.0, July 2024
  • Version 8.0, January 2024
  • Version 7.0, July 2023
  • Version 6.0, March 2023
  • Version 5.0, November 2022
  • Version 4.1.1, July 2022
  • Version 4.1, June 2022
  • Version 4.0.1, May 2022
  • Version 4.0, May 2022
  • Version 3.1, August 2021
  • Version 3.0, April 2021
  • Version 2.1, December 2020
  • Version 2.0, August 2020
  • Version 1.0.1, January 2020
  • Version 1.0, December 2019
• Revision history