KW45B41Z8
NXP
Example: el2go-host get-template -f kw45b41z8 -o kw45_el2go_config.yaml
Application NoteNxp
EdgeLock 2GO Provisioning via SPSDK for MCUs
Guidance on using NXP SPSDK as a proxy to provision MCUs and MPUs with secure objects and certificates from the EdgeLock 2GO cloud platform.
Overview
This application note describes the process of provisioning NXP MCUs and MPUs using the EdgeLock 2GO managed cloud platform and the Secure Provisioning SDK (SPSDK). It focuses on the 'Device provisioning via proxy' flow, where the SPSDK tool facilitates the transfer of secure objects—such as symmetric roots of trust, key-pairs, and certificates—from the EdgeLock 2GO server to the target device. The document details hardware requirements, account configuration, and the setup of supporting software including Kleopatra for key encryption. It explains how secure objects are configured in the cloud, encrypted with the EdgeLock 2GO root of trust, and then securely installed into device fuses or flash memory via provisioning firmware.
Use Cases
- IoT device manufacturing and production
- Secure cloud onboarding for AWS IoT Core or Azure IoT Hub
- Implementation of data encryption and decryption
- Access control management in embedded systems
- Secure credential deployment and maintenance
Topics
EdgeLock 2GO
SPSDK
NXP MCU
IoT security
device provisioning
secure objects
Kleopatra
secure enclave
KW45B41Z8
SE05x
Referenced Parts
SE05x
NXP
IoT devices that integrate NXP MCU, MPU, and EdgeLock SE05x secure elements.
| KW45B41Z8 | NXP | Example: el2go-host get-template -f kw45b41z8 -o kw45_el2go_config.yaml |
| SE05x | NXP | IoT devices that integrate NXP MCU, MPU, and EdgeLock SE05x secure elements. |