Release Notes for MCUXpresso Secure Provisioning Tool

Version: 26.03

Date: March-2026

Overview

Secure Provisioning Tool (SEC) is a graphical user interface (GUI) tool that covers the secure boot process and trust provisioning capabilities, primarily aimed at microcontroller customers. It provides a unified GUI front-end over SPSDK command-line tools. The tool is designed to help users to prepare complex security configuration easily, while keeping the possibility to customize the generated scripts.

For more visit: https://nxp.com/sec

Supported processors

  • i.MX RT1xxx processors:

    • RT101x, RT102x, RT104x, RT1050, RT106x

    • RT116x, RT117x, RT118x

  • i.MX RT5xxS/6xxS/7xxS processors

  • Kinetis W processors:

    • K32W148, KW45B41Zx, KW47B42Zxx, KW47Z420xx, KW45Z410xx

  • LPC processors:

    • LPC55S6x, LPC55S3x, LPC55S2x, LPC55S1x, and LPC55S0x

    • LPC553x, LPC552x, LPC551x, and LPC550x

    • LPC865

  • NHS52S04

  • MC56F816xx/7xx/8xx processors

  • MCX processors:

    • MCXA13x, MCXA14x, MCXA15x, MCXA17x, MCXA18x, MCXA25x, MCXA26x, MCXA34x, MCXA35x, MCXA36x

    • MCXA28x, MCXA45x, MCXA53x, MCXA55x, MCXA56x, MCXA57x

    • MCXCx4x

    • MCXE24x, MCXE31x

    • MCXL25x

    • MCXN23x, MCXN24x, MCXN52x, MCXN53x, MCXN54x, MCXN94x

    • MCXN55xS

    • MCXW23x, MCXW716x, MCXW727x

  • MWCT2x12/D2 processors

  • RW61x processors

  • i.MX 9x processors:

    • MIMX9352

    • MIMX9596

Features

  • Conversion of ELF executables, SREC, HEX, and raw binaries into bootable image files

  • Credentials (keys, signatures, and certificates) generation and management associated with signed/encrypted images

  • Target device connection via UART, USB-HID, SPI, and I2C

  • Writing FlexSPI NOR, FlexSPI NAND, SEMC NAND, eMMC or SD card boot devices including configuration of the boot device parameters

  • Use of DCD/XMCD configuration for SDRAM images bootup

  • Programming customizable eFuses and/or protected flash regions per image and use case requirements

  • Optional batch scripts generation for later use without the GUI

  • Streamlined operation for general users

  • Manufacturing Tool with support of parallel execution

  • Trust provisioning and device HSM provisioning for selected processors

  • Flash programming GUI Tool

  • Debug authentication

  • SB editor Tool including support of device HSM SB files

  • Support of MCUboot secondary bootloader

  • Detailed supported features for each processor listed in the user guide

  • Available for Windows, Linux, and macOS

System requirements

  • One of the following Host Operating systems:

    • Microsoft(R) Windows(R) 11 (64-bit)

    • macOS 14 Sonoma (Intel x86_64 or Aarch64)

    • Ubuntu 22.04 LTS 64-bit, with “OpenSSL 1.1.1f 31 Mar 2020”; GNOME is recommended

    • Ubuntu 24.04 LTS 64-bit, with GNOME and OpenSSL 3.0.13 30 Jan 2024; GNOME is recommended

  • 4 GB of RAM or more

  • Minimum display with resolution:

    • Windows: 1280 x 720 with 100% scale; higher resolution can be used with higher scale (for example, 1920 x 1080 with 150% scale)

    • Linux: 1366 x 768

  • P&E Micro debug probe users: install drivers from the P&E web site or install MCUXpresso IDE

    • P&E Micro does not support macOS Aarch64

  • Lauterbach debug probe users: install Lauterbach from the Lauterbach web site and configure access over the network in config.t32

  • MCU-Link or LPC-Link debug probe users: install drivers from the NXP web site (for relevant links, refer to Secure Provisioning Tool User Guide document MCUXSPTUG)

Known issues and limitations

What is new

This chapter provides details about the changes for each released version of the tool.

Version 26.03, March-2026

  • Added support for MCXA28x/45x/53x/55x/56x/57x processors, unsigned boot mode only

  • Added support for MCXA185/186/355/356 and MCXW235 processors variants

  • Added support for lifecycle, debug password, dual‑boot features and SMR advanced boot mode for MCXE31x

  • Added signature provider support for i.MX RT1xxx

  • Enabled SPI and I2C on MCXA132/133

  • i.MX RT7xx: Added reset application into device HSM; Updated fuse definitions

  • MIMX9596: added signed‑image and fuse support; added FRDM‑IMX95 board

  • MIMXRT118x: added SPARSE boot image format

  • Added an option to lock generated files for customization

  • SB editor now displays the corresponding build command

  • MCXN: CFPA version auto‑increment enabled by default

  • CLI: added EdgeLock 2GO configuration support

  • Firmware updates:

    • RT5xx/6xx: HSM provisioning firmware moved to public release

    • KW EdgeLock 2GO provisioning firmware updated and moved to public release

    • MCXN EdgeLock 2GO provisioning firmware updated in restricted data, added support for MCXN235 processors

    • RW61x EdgeLock 2GO provisioning firmware updated

  • Fixes:

    • All SB files for MCXN processors now provision the CFPA page

    • Corrected firmware version for MCXN556

  • Integrated NXP Secure Provisioning SDK 3.7.1

Version 25.12, Dec-2025

  • Added support for new processors:

    • MCXN55xS processors with the dual-key scheme: ECC + PQC

    • MCXE31x processors: MCXE315, MCXE316, MCXE317, MCXE31B - unsigned and authenticated basic boot types, without life-cycle advancement

    • Additional MCXNxxx processors: MCXN53x, MCXN52x, MCXN24x

    • Additional MCXAxxx processors: MCXA344, MCXA343, MCXA173, MCXA174

  • Added EdgeLock 2GO per product provisioning support for the MCXNxxx processors except MCXN235; updated provisioning FW

  • Manufacturing tools can now detect RT1xxx processors with a running flashloader.

  • Improved New Workspace Wizard: Created new-workspace.html in the root folder

  • i.MX RT7xx: Disabled number of keys <4, as the latest silicon revision requires 4 keys.

  • CLI: Added a new parameter –ignore-error

  • Quick fix for MCXA/L devices: set CMPA ACL regions to read-only and executable rule

  • Improved device HSM SB file:

    • LPC55S36: Added a reset application as the last command of the SB file

    • MCXN: Changed the order of the CUST-MK-SK to execute it as the final step prior to system reset

  • macOS manufacturing: Fixed provisioning of multiple connected SPI/I2C devices

  • PEMicro debug probe: From this release, available only via pyOCD

  • Additional images: Improved validation of overlapping images and dual-boot selection

  • RT118x:

    • Added recommendation for 16K alignment for multicore images

    • Added load address overlapping validation for serial downloader, error displayed

  • Fixed the sequence of commands in the SB file to load the IFR application for working on MCXN processor in advanced LC state

Version 25.09, Oct-2025

  • Added support for new processors:

    • MCXA processors: MCXA175, MCXA176, MCXA255, MCXA256, MCXA265, MCXA266, MCXA345, MCXA346, MCXA365, MCXA366

    • MCXL processors: MCXL253, MCXL254, MCXL255 - unsecured boot types only

    • i.MX RT1186 processor

  • MCXE24: added support for secure boot and key store management

  • Added EdgeLock 2GO device provisioning support for KW47 processors

  • Added EdgeLock 2GO per product provisioning support for the RW61x processors; updated provisioning FW

  • i.MX RT700: added support of USB connection

  • Added serial downloader support as a boot device for i.MX RT118x processors

  • KW47 improvements:

    • Added support for virtual counters

    • Removed read protection for all lock fuses

    • NBU_SEC_BOOT_EN fuse not forced to burn for secured boot types

  • i.MX 95: added support of B0 silicon revision

  • Improved New Workspace Wizard:

    • The wizard now displays board(s) with compatible settings

    • Allowed easy creation of an MCUboot scenario with a sample or custom application image

    • Improved selection of sample applications

  • CLI:

    • Added new command for verification of the connected processor

    • Added option to display all supported boot devices

  • Removed CLI uuu and fully replaced by nxpuuu

Version 25.06, June-2025

  • Added support for new processors:

    • MCXE24x processors: MCXE245, MCXE246, MCXE247 - unsecured boot types only

    • KW45Z410xx processors: KW45Z41052, KW45Z41053, KW45Z41082, KW45Z41083

  • Added EdgeLock 2GO WPC provisioning support for MWCT processors

  • Added secure boot support for KW47 and MCXW727x processors

  • Added high-level command for KW processors to update NBU firmware

  • Added support for fuses longer than 32 bits

  • Added support for encryption, firmware version for i.MX RT7xx processors

  • Added full support for custom VID&PID in manufacturing; Improved logs for manufacturing

  • To prioritize the tool improvements, an option to collect information about the tool usage is added.

  • Added an option to lock RT116x/7x fuses during programming

  • Workspace Wizard: Organized processors in the tree by purpose

  • Dropped support of the following features:

    • Smart card trust provisioning

    • Loading settings created by the tool version 4.x or older

    • LPC55xx and RT5xx/6xx: Renamed workspace subdirectory “gen_sb” to “config”, unified with other processors

  • Integrated SPSDK 3.0.1 with several incompatibilities, such as:

    • Renamed the parameter “file” in the SB load command to “data”

    • Converted BD file to YAML format

    • Unified mbi_config.yaml and removed unused fields

    • Changed parameters for several SPSDK applications

    • Removed support of smart card trust provisioning

    • Added logs into workspace/logs

  • Unified OTP, PFR, IFR, and FCF/BCA descriptions with SPSDK

  • Updated MCUboot application from 2.0 to 2.1

  • Added RW61x Edgelock2GO provisioning FW v2.0

Version 25.03.01, April-2025

  • Fixed a minor failure of the LPCs write script for Windows if CFPA not updated

Version 25.03, March-2025

  • Added support for new processors:

    • i.MX RT1043 and RT1046 processors

    • MCX A13x processors

    • MCX C processors: MCXC041, MCXC242, MCXC444

    • MCX W236 processor

    • i.MX 9352 (unsigned and signed images)

    • KW47 and MCXW727x processors, unsigned boot types only

  • Added EdgeLock 2GO Trust provisioning support for KW45, K32W, MCXW71x, and MCXN

  • LPC55Sxx and NHS: added dual-boot (ping/pong) support

  • RT7xx: added signed load-to-RAM image support via SB file; added XMCD support

  • Added key revocation for LPC55Sxx/RTxxx processors

  • RT118x: added RSA-PSS keys support

  • Added Merge Images tool to merge up to 8 images into one single binary file

  • Added ability to export and import workspace, see main menu > File

  • Added command main menu > Help > Release notes

  • LPC55Sxx and RT5xx/6xx: RSA4K bit set if 4K keys generated, so debug authentication works

  • Added option to check for a new version of the tool, see main menu > File > Preferences

  • Added detection whether device HSM rebuild is needed, if not skipped automatically

  • Moved log files to a new workspace sub-directory called ‘logs’

  • To avoid problems with hidden post-progress conversions, CMPA and CFPA YAML files contain values in RAW format.

  • Added warning if user opens a workspace from older version

  • Improved names of the boot modes (plain vs encrypted)

  • Moved fuses from the restricted data package to the tool and they are no more restricted

  • LPC55S0x/1x/2x/6x and NHS52S04: Backward incompatibility with version 10:

    • PFR.CMPA.RSA4K bit-field not preset by the tool; it is only validated and a warning displayed

  • Integrated SPSDK 2.6.1 with lpcprog and nxpuuu tools

    • nxpuuu intended to replace the uuu tool, which now deprecated and might be removed in the next release

  • Added Lauterbach debug probe support (Windows only)

Version 10.0, November 2024

  • Added a new dialog for workspace creation with predefined profiles

  • Added support for MCX W71xx processors

  • Added preliminary support for i.MX RT798, plain, crc, and signed images

  • Added preliminary support for i.MX 95, silicon revision A1, unsigned images

  • Added EdgeLock 2GO Trust provisioning support for MCXNx4x and RW61x; unified device HSM with the EdgeLock 2GO process

  • RW61x: FRDM-RW61x is now the default memory configuration for a new workspace; fuses updated

  • The Manufacturing package can be optionally encrypted with a password

  • Added a hook for modification of environment variables at the start of the build and write scripts

  • Added additional images support for KW45xx and K32W1xx

  • Added additional predefined configurations for the boot memory configuration (not verified on silicon)

  • The `Create FCB` command now backs-up and restores the content of the memory where the FCB is stored

  • TrustZone templates are now preset on the build page, so it is easier to find them and customize; the file can be in the YAML format

  • i.MX RT10xx: removed the SEC_SET_ENGINE section from the BD file

  • Added third-party licenses into the product layout. See the “licenses” subfolder

  • Added environment variables support in CLI. Environment variables are supported in all path arguments and in configuration JSON files

  • Integrated NXP Secure Provisioning SDK 2.3.1

Version 9.0.1, August 2024

  • Fixed authentication for ECC keys for i.MX RT116x/7x

    • Fixed authentication for ECC 384/521

    • Fixed the random invalid signature for ECC 256

  • Fixed a freeze in the PRINCE dialog settings for MCXN and LPCs

  • Incorrect MCX N PRINCE configuration - especially when multiple regions are configured - is fixed by the configMemory parameter in the SB file

Version 9.0, July 2024

  • Added support for MCF56816xx/7xx/8xx processors

  • Added support for MCXN23x and additional MCXA14x/MCXA15x processors

  • Added support for MWCT2x12/D2 processors

  • Added support for the NHS52S04 processor

  • Added support for MCUboot - an open-source secondary bootloader

  • Additional images can now be used for most of the processors (except KW)

  • Exported OTP/PFR/IFR configuration now contains the page name validated during the import

  • Added firmware version support for LPC55Sxx and i.MX RTxxx processors; for RT118x it is available only for signed images

  • Minimal firmware version can now be specified in the firmware configuration dialog

  • Added build, write, and manufacturing script hooks support

  • Removed the limitation for key chain length for LPC55S6x and i.MX RTxxx processors; for other LPCs changed to warning

  • Added FlexSPI instance selection support for FlexSPI NAND for i.MX RT116x/7x

  • Added key revocation constraint support for LPC55S3x, MCX N1xx, RW61x, KW45, and K32W processors

  • MBI image is partially erased before the device HSM, so it does not boot after reset. Applies to MCXN10, MCXN11, LPC55S3x, RW61x, and MWCT2x12

  • In the installation layout, created the “sample_data” sub-folder (soft link). It contains sample binary applications, signature provider examples, trust zone, XMCD, and DCD configuration templates

  • Signature provider:

    • Added support of sending only a hash of the data for signing

    • Incompatible change in encoding of send public keys, public keys encoded in the standard key encodings (pem, der, nxp) instead of the hex format

  • Integrated NXP Secure Provisioning SDK 2.2.x with the following highlighted changes:

    • New tools: nxpmemcfg, dk6prog, el2go, nxpwpc

  • i.MX RT1050/6x: added eMMC support

  • RW61x: device HSM provisioning now required device HSM loader from restricted data

  • Removed the support for JLink and PEmicro debug libraries. All debug probes are now supported via pyOCD

  • Added CLI tools (imgtool and uuu)

  • CLI: added support for saving or modifying workspace settings and specifying additional images

  • Fixed $check_fw_versions SB2.1 high-level commands for SB editor

  • Fixed the default flash (W25Q512NWEQ) for i.MX RT117x based on the flash used on RT117x-EVKB

  • Fixed the key used to sign flashloader for i.MX RT10xx and RT116x/7x - changed from the first key to the selected key

  • Fixed the flashloader for i.MX RT1181/82 processors

Version 8.0, January 2024

  • LPC55S3x, KW45xx, K32W1xx: added support for images executed in RAM (XIP images)

  • Added support for MCXN9xx/MCXN5xx/MCXA14x/MCXA15x processors

  • Added support for i.MX RT118x processors with a new option to include additional images into the build

    • RT1181 and RT1182 processors not available at release time, the tool tested on preproduction silicon only

  • Added support for RW61x processors (including shadow registers)

  • Added support for SB 2.1 Editor, supported for i.MX RTxxx and LPC55Sxx processors

  • Added an option to configure the signature provider via a custom web server

  • Added an option to specify separate FCB files for flash programming and runtime

  • Added ECC keys support for i.MX RT116x/7x

  • i.MX RT11xx bootable image can now be used as the source image for the build (previously this only for RT10xx)

  • Added support for multiple monitors

  • Integrated NXP Secure Provisioning SDK 2.x with the following highlighted changes:

    • Removed the elftosb tool, replaced by nxpimage; replaced the nxpkeygen tool by nxpcrypto

    • Updated changes in command-line arguments

    • Several additional incompatible changes in configuration files

  • LPC55S3x, KW45xx, K32W1xx: replaced spsdk/nxpkeygen tool with spsdk/nxpcrypto

  • Removed legacy tools arm-none-eabi-objcopy, blhost, sdphost, elftosb, image_enc, and cst (fully replaced by spsdk tools)

  • Added a new installer for Mac OS with the Apple M processor (previously Intel processors only were supported)

  • Windows: the workspace can now be located on a drive with a letter other than the letter of the installed application.

Version 7.0, July 2023

  • Added smart card trust provisioning support for the LPC55S36 processor

  • Smart card trust provisioning supported only for smart card 1.2 or higher

  • Redesigned configuration of boot memory; added support for user presets and custom-protected area

  • Extended newly added dual image (ping/pong) boot support to LPC55(S)3x, KW45xx, K32W1xx, and RT116x/7x

  • Added support for SB 3.1 editor for LPC55S3x, KW45xx, and K32W1xx processors

  • Improved configuration of IFR/ROMCFG for KW45xx and K32W1xx processors, now configured per 16-byte blocks

  • i.MX RT116x/7x: legacy elftosb and image_enc tools are replaced by spsdk/nxpimage

  • i.MX RT116x/7x: flashloader is updated and detection of locked fuses (via blhost get-property 31) is added

  • i.MX RT116x/7x: eMMC is supported

  • i.MX RT11xx: XMCD is supported, either via the link to the configuration file or via a simplified GUI editor

  • i.MX RT10xx: support for SPI NAND is added

  • Improved the grouping of processors in the “New workspace” dialog

  • Integrated NXP Secure Provisioning SDK 1.10.2

Version 6.0, March 2023

  • Added KW45xx and K32W1xx processors

  • Enabled support for the LPC55S36 processor

  • Fixed configuration of boot device Macronix_MX25UM51345G_A.json to match recommendations from reference manuals

  • LPC55Sxx: DICE can be enabled by the user, UDS key is initialized in the write script

  • LPC55Sxx and i.MX RTxxx: It is possible to regenerate ROT certificates with a different serial number (for key revocation)

  • LPC55Sxx: CFPA content verified before write and an error reported if the version is not incremented (GUI only)

  • LPC55Sxx: Added support for encrypted plain boot type

  • Added i.MX RT1040 processor

  • i.MX RT1060: added new EVK board revision support: MIMXRT1060-EVKC

  • i.MX RT107x: added new EVK board revision support: RT1170-EVKB

  • i.MX R685: added new EVK board support: RT600-AUD-EVK

  • i.MX RT5xx: Added dual image (ping/pong) boot support with PUF key source

  • i.MX RT5xx and RT6xx: Added eMMC and SD card support

  • i.MX RT6xx: Added debug authentication support

  • Trust provisioning: added support for multiple smart cards, USB connection, and performance improvements

  • Flash programmer performance improvements for higher buffer sizes

  • Build view: displayed all generated files and their status

  • Window locations and sizes are stored in preferences

  • The tool displays a ‘dirty’ flag if settings are not saved on disk. A new preference to save automatically is added.

  • Changed setting file spt_settings.json to settings.sptjson

  • File extension .sptjson is associated with the SEC tool, so it can be opened directly with the tool

  • CLI: Added a new argument in write scripts: erase_all - performs an erase of the entire flash memory instead of erasing regions only

  • Tool localized to Chinese

  • Legacy blhost updated to v2.6.7

  • LPC55S69: dropped support of trust provisioning firmware for silicon revision 8

  • i.MX RT633S: the processor removed, not supported from v6.0

  • Integrated NXP Secure Provisioning SDK 1.9.1

Version 5.0, November 2022

  • Added support for LPC55xx and LPC553x processors (non-S)

  • Added support for main menu > Tools > Flash Programmer

  • Added support for trust provisioning using Smart Card for LPC55S0x/1x processors

  • Added support for device HSM provisioning for i.MX RT6xx processors

  • Added support for dual image (ping/pong) boot for i.MX RTxxx processors with an OTP key source

  • Legacy elftosb is replaced by elftosb from SPSDK for i.MX RTxxx processors

  • OTP Configuration is moved from the Write image page to the Build image page

  • write_parameters.json is generated for write with parameters reused from build; CLI parameters updated

  • Added support for burning fuses in SB file for i.MX RTxxx processors

  • Added support for debug authentication for LPC55Sxx and i.MX RTxxx processors

  • Added support for OTFAD encrypted boot mode with master key for i.MX RT1011 processor

  • Added support for FlexSPI NAND boot for i.MX RT117x/RT116x processors

  • Added support for localization, Manufacturing Tool is localized to Chinese (see Preferences)

  • Added “MX25U51245G_B” boot device configuration for i.MX RT600-AUD-EVK

  • The command “main menu> File > Generate Scripts” is removed, it was replaced by the link on Build image and Write image views

  • Integrated SPSDK 1.7 with the following highlighted changes:

    • new tools: nxpimage and nxpcrypto

    • elftosb: added support to burn fuses in the SB file

Version 4.1.1, July 2022

  • Trust provisioning tools updated from NXP Secure Provisioning SDK 1.6.3

Version 4.1, June 2022

  • LPC55S69: 2 versions of trust provisioning firmware for different silicon revisions are now supported.

  • Added Ubuntu 22.04 LTS support

Version 4.0.1, May 2022

  • Windows: Fix for LPC55Sxx write script in sealing the CMPA page

  • Updated terminology in GUI and documentation

Version 4.0, May 2022

  • Added support for Trust Provisioning using Smart Card for LPC55S6x/2x

  • Added support for “life cycle” selection instead of the “Enable security” checkbox (for all processors)

  • Added support for Encrypted (HAB) and Encrypted (IEE) boot modes for RT11xx

  • Added support for FlexSPI instance selection for i.MX RT11xx processors

  • Added support for OTFAD encrypted boot mode with user keys for i.MX RT1010 processors

  • Added support for SPI and I2C connection types (for LPC55Sxx and i.MX RTxxx)

  • Improved fields and bits names in PFC Configuration for LPC55Sxx processors

  • Improvements on the Manufacturing Tool: Added counter of successful operations and a “Test connection” button

  • Improved layout of PFR Configuration dialog for improving the user experience on Linux

  • Several fixes and improvements for write script for i.MX RTxxx processors

  • Added a “Clear CMPA” button into the PFR configuration dialog

  • Removed CLI command “clear-security”, replaced by the PFR configuration and a “Clear CMPA” button

  • Windows: Fixed the problem that the Secure Provisioning Tool does not run with some region settings

  • Integrated SPSDK 1.6 with the following highlighted changes:

    • Added additional CLI tools: tpconfig, tphost, nxpcertgen, nxpdevhsm, shadowregs, nxpdevscan

    • blhost:

      • Improved the performance of the “receive-sb-file” command; however, if it fails, the reported error code might not be correct; use the parameter “–check-errors” to see the detailed problem information

      • The command “efuse-program-once” automatically verifies the written value to avoid problems on i.MX RT11xx processors, where the write failure was reported as a successful operation (see also –verify/–no-verify option)

    • pfr, pfrc:

      • Updated the names of the fields and their bits without preserving backward compatibility

Version 3.1, August 2021

  • Added Mac OS X Big Sur (version 11) support; dropped Microsoft(R) Windows(R) 7 support

  • Added i.MX RT1171, RT1172, RT1173, RT1175, RT1165, RT1166 support

  • Removed the CLI command “write_fuses”, replaced by OTP Configuration

  • [LPC55Sxx] Added PFR Configuration GUI support

  • [LPC55Sxx] Added PRINCE encryption support of “Whole image” without the necessity to enter an exact address range

  • [RTxxx, RT11xx] Added OTFAD encryption support

  • Added i.MX RT1010 support: Unsigned and Authenticated (HAB) modes

  • Integrated NXP Secure Provisioning SDK 1.4

Version 3.0, April 2021

  • Added i.MX RT1176 support: Unsigned and Signed modes

  • Added i.MX RT5xx/RT6xx support: Unsigned/CRC/Signed boot modes

  • Added PRINCE encryption support for LPC55Sxx processors

  • Added OTP configuration support

  • Added Manufacturing Tool support

  • [LPC55Sxx] Generated CMPA/CFPA.bin files using the PFR tool; used CMPA/CFPA.json as an input

  • [LPC55Sxx] Fixed the initial version of CFPA for Signed boot mode (0x02000_0000 to 0x0000_0002)

  • i.MX RT10xx/RT11xx: added restricted data support

  • RT5xx/RT6xx: added the ability to use Shadow registers instead of using FUSEs

  • Added Ubuntu 20.04 support

  • Replaced blhost and sdphost utilities with SPSDK alternatives; added new CLI utilities: pfr, nxpkeygen, and nxpdebugmbox (Debug Authentication) in tools/spsdk

  • LPC55Sxx Key Store: Key store initialized only once in the device life cycle and after that SBKEK cannot be changed

  • i.MX RT10xx GPx fuse lock: removed lock for the GPx fuse provided in previous versions in V3 as the lock is not required for a bootable image;

    Note: However, it is still recommended to lock the fuse; see “OTP Configuration”

Version 2.1, December 2020

  • Added i.MX RT1015, i.MX RT1024, LPC55S06, and LPC55S04 support

  • Mac OS X - fixed saving the workspace setting in case the App Menu “securep | Quit securep” is used

  • Mac OS X - fixed connection dialog freeze in case a wrong UART used

  • [LPC55Sxx] Several improvements for Signed LPC images

  • [LPC55Sxx] CLI allows setting/overriding the Trust Zone Settings

  • Other minor improvements and bug-fixes

Version 2.0, August 2020

  • Added i.MX RT1020 and i.MX RT1064 support

  • Added LPC55S6x, LPC55S2x, and LPC55S1x support

    • Unsigned, Unsigned CRC, and Signed boot modes

    • TrustZone support (bin + json)

    • Key Management - Secure Boot, Generation of ROT keys

  • BEE boot for i.MX RT10xx

    • OTPMK

    • SW-GP2/GP4

  • Added Import/Export Keys between workspaces

  • Improved the connection dialog, it supports UART test connection, improved processor detection, and detection of fuse status

Version 1.0.1, January 2020

  • Added Mac OS X Catalina (10.15) + Ubuntu 18.04 support

  • Fixed termination of subprocesses of long-running tasks

Version 1.0, December 2019

  • Initial version with i.MX RT1050 and i.MX RT1060; for Windows

Revision history

Table 1. Revision history

Document ID

Release date

Description

MCUXSPTRN v.15.0

25 March 2026

Features for 26.03 are added.

MCUXSPTRN v.14.0

12 December 2025

Features for 25.12 are added.

MCUXSPTRN v.13.0

10 October 2025

Features for 25.09 are added.

MCUXSPTRN v.12.0

30 June 2025

Features for 25.06 are added.

MCUXSPTRN v.11.0

14 April 2025

Changes for 25.03.01 are added.

MCUXSPTRN v.10.0

28 March 2025

Features for 25.03 are added.

MCUXSPTRN v.9.0

13 November 2024

Features for v.10 are added.

MCUXSPTRN v.8.0

19 August 2024

Features for v.9.0.1 are added.

MCUXSPTRN v.7.0

31 July 2024

Features for v.9 are added.

MCUXSPTRN v.6.0

11 January 2024

Features for v.8 are added.

MCUXSPTRN v.5.0

20 July 2023

Features for v.7 are added.

MCUXSPTRN v.4.0

15 March 2023

Features for v.6 are added.

MCUXSPTRN v.3.0

30 September 2022

Features for v.5 are added.

MCUXSPTRN v.2.0

24 June 2022

Features for v.4.1 are added.

MCUXSPTRN v.1.0

10 May 2022

Features for v.4.0.1 are added.

MCUXSPTRN v.0

28 April 2022

Initial release