Features#
Here are the key features of the MCUXpresso Secure Provisioning Tool (SEC):
Security Enablement#
Image signing and encryptions: Supports generation of signed and encrypted images using customer-provided keys and certificates.
Secure boot configuration: Automates creation of secure boot headers (for example, HAB, TrustZone-M, BEE).
Key management: Integrates with NXP’s key provisioning workflows, including SRK, DEK, and OTP key programming.
Optional signature provider: It allows customizing integration of HSM module for signing the image.
Trust provisioning: device HSM and EdgeLock 2GO
Device Communication & Flashing#
BootROM interface support: Communicates with BootROM via UART, USB, SPI, or I2C.
Flash programming: Supports writing to internal flash and external memory (for example, QSPI, FlexSPI NOR/NAND, eMMC).
Device detection and connection management: Auto-detects connected devices and manages communication
User Experience#
Guided workflows: workspace wizard with predefined profiles to create a new configuration easily.
Visual feedback: Real-time status updates, logs, and error reporting.
Cross-Platform Support: Available for Windows, Linux, and macOS.
Useful Extensions#
Debug authentication support
SB editor allowing creation of Secure Binary files
Merge tool allowing merging several images into one
MCUboot signer allowing signing the custom application via the MCUboot third-party tool
Manufacturing tool for FAB operations, allowing provisioning several devices in parallel
Additional command-line utilities for low-level interaction with the device
Device & Platform Support#
Broad MCU family coverage: Compatible with a wide range of NXP MCUs (for example, i.MX RT, LPC, MCX).
Support for latest silicon features: Regularly updated to support new security features and silicon revisions.