Secure Provisioning Tool 26.03

Version: latest 26.06 26.03 25.12 25.09 25.06 25.03.01 25.03

Source (.md/.rst) Page PDF (.pdf)

MCUXpresso Secure Provisioning documentation

This page contains documentation for the MCUXpresso Secure Provisioning Tool (SEC)

Quick Start Guide

• Overview
• Hardware requirements
• Software requirements
• Installing and configuring the SEC Tool
• Using the tool
  • Prerequisites
  • New workspace
  • Tool GUI
  • Check connection
  • Build bootable image
  • Test bootable image
  • What is next
  • Processor-specific workflows
• References
  • Release Notes
  • User Guide
  • NXP Secure Provisioning web
  • Community, forum, knowledge base
• Revision history

User Guide

• Introduction
• Features
  • Security Enablement
  • Device communication and flashing
  • User experience
  • Useful extensions
  • Device and platform support
• Terms and definitions
• Installation
  • Minimum system requirements
  • Windows
    • Windows CLI
  • MacOS
    • Enabling USB connection on macOS
  • Linux
  • Uninstalling
    • Windows
    • MacOS
    • Linux
    • Remove configuration files
    • Remove restricted data
• User interface
  • Menu and settings
    • Title of the main window
    • Menu bar
    • Preferences
    • Workspaces
    • Toolbar
    • Connection
    • Boot memory configuration
    • Trust provisioning
    • Debug Probe Selection dialog
  • Build image
    • Controls on the Build image view
    • Source image formats
    • Additional and bootable images dialog
    • Firmware versions
    • XMCD configuration dialog
    • TrustZone configuration file
    • OTP/PFR/IFR/BCA/FCF configuration
  • Write image
    • Controls on the write image view
    • Manufacturing package
  • PKI management
    • Generate keys
    • Add keys
    • Re-generate certificate
    • Import/Export keys
    • Debug authentication
    • Signature provider
  • Manufacturing Tool
    • USB path
  • Flash Programmer
  • SB editor
    • SB editor contains the following main UI parts:
    • File type
    • Properties view
    • Commands view
    • $ Variables
    • Validation
    • SB file in manufacturing
  • Merge Tool
• Processor-specific workflows
  • Common steps
    • Downloading MCUXpresso SDK
    • Opening example project
    • Building example project
    • Setting up Secure Provisioning Tool
    • Preparing secure keys
    • Build and write
  • i.MX 9x device workflow
    • Preparing images for build for i.MX 9x devices
    • Connecting the board for i.MX 9x devices
    • Booting images for i.MX 9x devices
  • KW45xx/K32W1xx/MCXW71xx/KW47xx/MCXW72xx device workflow
    • Preparing source image for KW45xx/K32W1xx/MCXW71xx/KW47xx/MCXW72xx devices
    • Connecting the board for KW45xx/K32W1xx/MCXW71xx/KW47xx/MCXW72xx devices
    • Booting images for KW45xx/K32W1xx/MCXW71xx/KW47xx/MCXW72xx devices
    • NXP keys for KW45xx/K32W1xx/MCXW71xx boards
    • Update NBU firmware
  • LPC55(S)0x/1x/2x/6x device workflow
    • Preparing source image for LPC55(S)0x/1x/2x/6x devices
    • Connecting the board for LPC55(S)0x/1x/2x/6x devices
    • Booting images for LPC55(S)0x/1x/2x/6x devices
  • LPC55(S)3x device workflow
    • Preparing source image for LPC55(S)3x devices
    • Connecting the board for LPC55(S)3x devices
    • Booting images for LPC55(S)3x devices
  • LPC865 workflow
    • Preparing images for build for LPC865
    • Connecting the LPCXpresso860-MAX board for LPC865
    • Booting images for LPC865
    • Life cycles
  • MC56F818xx/7xx/6xx and MWCT2xD2/12 devices workflow
    • Preparing source image for MC56F818xx/7xx/6xx and MWCT2xD2/12 devices
    • Connecting the board for MC56F818xx/7xx/6xx and MWCT2xD2/12 devices
    • Booting images for MC56F818xx/7xx/6xx and MWCT2xD2/12 devices
    • EdgeLock 2GO WPC workflow
  • MCX A1/A2/A3/L2 device workflow
    • Preparing source image for MCX A1/A2/A3/L2 devices
    • Connecting the board
    • Booting images MCX A1/A2/A3/L2 devices
    • Life cycle for MCX A1/A2/A3/L2 devices
    • MCUboot for MCX A1/A2/A3/L2 devices
  • MCX A2/A4/A5 devices workflow
    • Preparing source image for MCX A2/A4/A5 devices
    • Booting images MCX A2/A4/A5 devices
    • Life cycle for MCX A2/A4/A5 devices
  • MCX C041/C242/C444 device workflow
    • Preparing source image for MCX C041/C242/C444 devices
    • Connecting the board for MCX C041/C242/C444 devices
    • Booting images for MCX C041/C242/C444 devices
  • MCX E24 device workflow
    • Preparing source image for MCX E24x devices
    • Connecting the board for MCX E24x devices
    • Booting images for MCX E24x devices
  • MCX E31 device workflow
    • Preparing source image for MCX E31x devices
    • Connecting the board for MCX E31x devices
    • Booting images for MCX E31x devices
  • MCX Nx4x/N23x/N53x/N52x/N24x device workflow
    • Preparing source image for MCX Nx4x/N23x/N53x/N52x/N24x devices
    • Connecting the board for MCX Nx4x/N23x/N53x/N52x/N24x devices
    • Booting images for MCX Nx4x/N23x/N53x/N52x/N24x devices
  • MCX N55xS device workflow
    • Preparing source image for MCX N55xS devices
    • Booting images for MCX N55xS devices
  • RT10xx/RT116x/RT117x device workflow
    • Preparing source image for RT10xx/RT116x/RT117x devices
    • Connecting the board for RT10xx/RT116x/RT117x devices
    • Booting images for RT10xx/RT116x/RT117x devices
    • Creating/Customizing DCD files
  • RT118x device workflow
    • Preparing source image for RT118x devices
    • Connecting the board for RT118x devices
    • Booting from serial downloader
    • Booting images for RT118x devices
  • RT5xx/6xx device workflow
    • Preparing source image RT5xx/6xx devices
    • Connecting the board for RT5xx/6xx devices
    • Booting images for RT5xx/6xx devices
  • RT7xx device workflow
    • Preparing source image for RT7xx devices
    • Connecting the board for RT7xx devices
    • Booting images for RT7xx devices
  • RW61x device workflow
    • Preparing source image for RW61x devices
    • Connecting the board for RW61x devices
    • Shadow registers for fuses via debug probe
    • Booting images for RW61x devices
• Generic workflows
  • Debug authentication workflow
    • Example of access rights to debug domains
  • Signature provider workflow
    • Run the server
    • Set up in the SEC Tool
  • Script hooks workflow
    • Build script hooks
    • Write script hooks
    • Manufacturing hooks
    • Typical usage
  • Zephyr
    • Common steps
    • Standalone Zephyr application
    • MCUBoot Zephyr application
    • Zephyr examples with MCUboot in different memory
    • Disabling MCUboot in Zephyr examples
  • Manufacturing workflow
    • Create manufacturing package
    • Performance optimization
    • Manufacturing operations
    • Steps in the manufacturing production
    • Manufacturing logs
  • MCUboot workflow
    • Steps to start MCUboot for NXP board via New Workspace
    • Steps to start MCUboot with such a processor manually
  • EdgeLock 2GO trust provisioning workflow
    • EdgeLock 2GO with device ID, high-level description
    • EdgeLock 2GO per product type, high-level description
    • EdgeLock 2GO flow, step by step
    • API key to access EdgeLock 2GO server
    • EdgeLock 2GO configuration via web portal
    • Database with secure objects for EdgeLock 2GO per product type
  • Merge Images Tool workflow
    • Building the TrustZone example projects for merge
    • Merging two images into one
    • Signing merged image
  • Custom USB VID and PID devices workflow
• Command-line operations
  • Build
  • Write
  • Generate keys
  • Manufacture
  • Devices info
  • Test Connection
  • Detect USB devices
  • Start flashloader
  • Apply settings
  • Environment variables in filepath-based arguments
  • Command-line examples
    • Example: How to build and write an image for configuration stored in the workspace folder
    • Example how to use args-file arguments
  • Command-line tools
• Troubleshooting
  • General
  • Windows
  • Linux
  • macOS
    • macOS i.MX 9x nxpuuu
  • i.MX RT5xx/6xx
  • i.MX RT1024
  • i.MX 9x
  • MC56F818xx and MWCT2xD2
  • MCX E31x
  • MCXN236 Fuse Burning with ROM version 1.0.4
  • Debug probes
  • Debug authentication
• References
  • User Guides
    • Secure Provisioning Tool User Guide (Chinese version)
    • Secure Provisioning Tool Quick Start Guide
    • User Guide for MCUXpresso Config Tools
    • Working With Zephyr
    • Zephyr Knowledge Hub
  • Release Notes
    • Secure Provisioning Tool release notes
    • i.MX Linux release notes
  • NXP Application Notes
    • EdgeLock 2GO application note
    • Secure boot on MCX Nx4x application note
    • Secure boot on MCX W23 application note
    • Secure boot on RW61x application note
    • How to enable boot from QSPI Flash application note for RT series
  • NXP Community
    • MCX N23x Boot ROM update
  • NXP SW resources
    • Secure Provisioning Tool home page
    • MCU-Link PRO product page
    • LPC-Link2 product page
    • MCUXpresso SDK Builder on NXP.com
    • EdgeLock 2GO web portal
    • ELE firmware
    • Embedded Linux for i.MX applications processors
    • NXP i.MX main repository
    • OEI DDR firmware
    • CM33 system manager repository
    • U-Boot SPL, U-Boot repository
    • ARM trusted firmware
    • TEE binary repository
  • Third-party resources
    • PKCS#1 wikipedia article
    • Security archive
    • MCUboot documentation
    • pyOCD official website
    • Kleopatra for Windows (GPG4Win)
    • GnuPG downloads
    • Ubuntu bug report for BRLTTY issue
    • libusb macOS issue
    • macOS environment sync solution
• Revision history
• Note about the source code in the document

Download PDF

• Offline documentation

Release Notes

• Release Notes for MCUXpresso Secure Provisioning Tool
• Overview
• Supported processors
• Features
• System requirements
• Known issues and limitations
• What is new
  • Version 26.03, March-2026
  • Version 25.12, Dec-2025
  • Version 25.09, Oct-2025
  • Version 25.06, June-2025
  • Version 25.03.01, April-2025
  • Version 25.03, March-2025
  • Version 10.0, November 2024
  • Version 9.0.1, August 2024
  • Version 9.0, July 2024
  • Version 8.0, January 2024
  • Version 7.0, July 2023
  • Version 6.0, March 2023
  • Version 5.0, November 2022
  • Version 4.1.1, July 2022
  • Version 4.1, June 2022
  • Version 4.0.1, May 2022
  • Version 4.0, May 2022
  • Version 3.1, August 2021
  • Version 3.0, April 2021
  • Version 2.1, December 2020
  • Version 2.0, August 2020
  • Version 1.0.1, January 2020
  • Version 1.0, December 2019
• Revision history