# Features

Here are the key features of the **MCUXpresso Secure Provisioning Tool** (SEC):

## Security Enablement

- Image signing and encryptions: Supports generation of signed and encrypted images using customer-provided keys and certificates.
- Secure boot configuration: Automates creation of secure boot headers (for example, HAB, TrustZone-M, BEE).
- Key management: Integrates with NXP’s key provisioning workflows, including SRK, DEK, and OTP key programming.
- Optional signature provider: It allows customizing integration of HSM module for signing the image.
- Trust provisioning: device HSM and EdgeLock 2GO

## Device Communication & Flashing

- BootROM interface support: Communicates with BootROM via UART, USB, SPI, or I2C.
- Flash programming: Supports writing to internal flash and external memory (for example, QSPI, FlexSPI NOR/NAND, eMMC).
- Device detection and connection management: Auto-detects connected devices and manages communication

## User Experience

- Guided workflows: workspace wizard with predefined profiles to create a new configuration easily.
- Visual feedback: Real-time status updates, logs, and error reporting.
- Cross-Platform Support: Available for Windows, Linux, and macOS.

## Useful Extensions

- Debug authentication support
- SB editor allowing creation of Secure Binary files
- Merge tool allowing merging several images into one
- MCUboot signer allowing signing the custom application via the MCUboot third-party tool
- Manufacturing tool for FAB operations, allowing provisioning several devices in parallel
- Additional command-line utilities for low-level interaction with the device

## Device & Platform Support

- Broad MCU family coverage: Compatible with a wide range of NXP MCUs (for example, i.MX RT, LPC, MCX).
- Support for latest silicon features: Regularly updated to support new security features and silicon revisions.