MBI-A-BT-B-F-CBV-EABF-EESV


root oneOf item 0

root oneOf item 0 allOf item 0

root oneOf item 0 allOf item 0 oneOf item 0
Type: object

The following properties are required:

  • mainRootCertPrivateKeyFile
root oneOf item 0 allOf item 0 oneOf item 1
Type: object

The following properties are required:

  • signPrivateKey
root oneOf item 0 allOf item 1

Must not be:

root oneOf item 0 allOf item 1 not
Type: object

The following properties are required:

  • signProvider
root oneOf item 1

root oneOf item 1 allOf item 0
Type: object

The following properties are required:

  • signProvider
root oneOf item 1 allOf item 1

Must not be:

root oneOf item 1 allOf item 1 not

root oneOf item 1 allOf item 1 not oneOf item 0
Type: object

The following properties are required:

  • mainRootCertPrivateKeyFile
root oneOf item 1 allOf item 1 not oneOf item 1
Type: object

The following properties are required:

  • signPrivateKey

root family

The chip family name

Type: enum (of string)

NXP chip family identifier.

Must be one of:

  • "k32w148"
  • "kw45b41z5"
  • "kw45b41z8"
  • "lpc5502"
  • "lpc5504"
  • "lpc5506"
  • "lpc5512"
  • "lpc5514"
  • "lpc5516"
  • "lpc5526"
  • "lpc5528"
  • "lpc5534"
  • "lpc5536"
  • "lpc55s04"
  • "lpc55s06"
  • "lpc55s14"
  • "lpc55s16"
  • "lpc55s26"
  • "lpc55s28"
  • "lpc55s36"
  • "lpc55s66"
  • "lpc55s69"
  • "mc56f81646"
  • "mc56f81648"
  • "mc56f81666"
  • "mc56f81668"
  • "mc56f81746"
  • "mc56f81748"
  • "mc56f81766"
  • "mc56f81768"
  • "mc56f81866"
  • "mc56f81868"
  • "mcxa132"
  • "mcxa133"
  • "mcxa142"
  • "mcxa143"
  • "mcxa144"
  • "mcxa145"
  • "mcxa146"
  • "mcxa152"
  • "mcxa153"
  • "mcxa154"
  • "mcxa155"
  • "mcxa156"
  • "mcxn235"
  • "mcxn236"
  • "mcxn546"
  • "mcxn547"
  • "mcxn946"
  • "mcxn947"
  • "mcxw716a"
  • "mcxw716c"
  • "mimxrt533s"
  • "mimxrt555s"
  • "mimxrt595s"
  • "mimxrt685s"
  • "mimxrt798s"
  • "mwct2012"
  • "mwct2012a"
  • "mwct20d2"
  • "mwct20d2a"
  • "nhs52s04"
  • "rw610"
  • "rw612"
  • "k32w1xx"
  • "kw45xx"
  • "lpc550x"
  • "lpc551x"
  • "lpc552x"
  • "lpc553x"
  • "lpc55s0x"
  • "lpc55s1x"
  • "lpc55s2x"
  • "lpc55s3x"
  • "lpc55s6x"
  • "mc56f816xx"
  • "mc56f817xx"
  • "mc56f818xx"
  • "mcxa1xx"
  • "mcxn23x"
  • "mcxn9xx"
  • "mcxn94x"
  • "mcxw71xx"
  • "rt5xx"
  • "rt6xx"
  • "rt7xx"
  • "mwct2x12"
  • "mwct2xd2"
  • "nhs52sxx"
  • "rw61x"

root revision

MCU revision

Type: enum (of string)

Revision of silicon. The 'latest' name, means most current revision.

Must be one of:

  • "a0"
  • "a1"
  • "latest"

root outputImageExecutionTarget

Application target

Type: enum (of string)

Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.

Must be one of:

  • "xip"
  • "load-to-ram"
  • "Internal flash (XIP)"
  • "External flash (XIP)"
  • "Internal Flash (XIP)"
  • "External Flash (XIP)"
  • "RAM"
  • "ram"

root outputImageAuthenticationType

Type of boot image authentication

Type: enum (of string)

Specification of final master boot image authentication.

Must be one of:

  • "plain"
  • "crc"
  • "signed"
  • "signed-encrypted"
  • "signed-nxp"
  • "nxp_signed"
  • "Plain"
  • "CRC"
  • "Signed"
  • "Encrypted + Signed"
  • "NXP Signed"
  • "NXP signed"
  • "encrypted"

root masterBootOutputFile

Output Image name

Type: stringFormat: file_name

The path for result binary file.

root inputImageFile

Plain application image

Type: stringFormat: file

The input application image to by modified to Master Boot Image.

root firmwareVersion

Firmware version.

Type: number or stringFormat: number

Used for anti-rollback protection. New firmware must have the same or higher FW version. This value is the minimum firmware version will be stored in BCA and the firmware version specified in SBX file is then compared with this value.

root lifeCycle

Life cycle state

Type: enum (of string)

life cycle state model to protect code from reading from the device internal flash, which is called code read protection feature. There are different levels of protections in the system, so that access to the on-chip flash and use of ISP can be restricted. Four levels of Read Out Protection (ROP) are supported. This read out protection is a mechanism that allows user to enable different levels of protection in the system. It is a 8-bit field FTFA_FSEC associated with flash security byte (0x40c byte address). It can be programmed by customer. Check the SRM for more information. If not provided, value in application will be used.

Must be one of:

  • "NOT_SET"
  • "OEM_OPEN"
  • "OEM_CLOSED_ROP1"
  • "OEM_CLOSED_ROP2"
  • "OEM_CLOSED_ROP3"
  • "OEM_CLOSED_NO_RETURN"

root certBlock

Certificate Block binary file

Type: stringFormat: file

Path to certificate block.

root addCertHash

True to append SHA256 hash [0:127] at the end of certificate block

Type: boolean

Not mandatory if the hash is written in OTP

root mainRootCertPrivateKeyFile

Main Certificate private key

Type: stringFormat: file

Main Certificate private key used to sign certificate. It can be replaced by signProvider key.

root signPrivateKey

Main Certificate private key

Type: stringFormat: file

Main Certificate private key used to sign certificate. It can be replaced by signProvider key.

root signProvider

Signature Provider

Type: string

Signature provider configuration in format 'type=<identifier>;<key1>=<value1>;<key2>=<value2>'.

root justHeader

Generate only header

Type: boolean

Build only the boot headers (Vector table, BCA, FCB) 0x0..0x800 binary without the application. This is needed for device HSM provisioning file in case the user set ROP2, ROP3.