MBI-A-RT-LA-I-TZ-CBV-HK-KS-HM-CIV-EATZCBE-ERS-EHKSF




Type: object

The following properties are required:

  • mainRootCertPrivateKeyFile
Type: object

The following properties are required:

  • signPrivateKey

Must not be:

Type: object

The following properties are required:

  • signProvider

Type: object

The following properties are required:

  • signProvider

Must not be:


Type: object

The following properties are required:

  • mainRootCertPrivateKeyFile
Type: object

The following properties are required:

  • signPrivateKey

The chip family name

Type: enum (of string)

NXP chip family identifier.

Must be one of:

  • "k32w148"
  • "kw45b41z5"
  • "kw45b41z8"
  • "lpc5502"
  • "lpc5504"
  • "lpc5506"
  • "lpc5512"
  • "lpc5514"
  • "lpc5516"
  • "lpc5526"
  • "lpc5528"
  • "lpc5534"
  • "lpc5536"
  • "lpc55s04"
  • "lpc55s06"
  • "lpc55s14"
  • "lpc55s16"
  • "lpc55s26"
  • "lpc55s28"
  • "lpc55s36"
  • "lpc55s66"
  • "lpc55s69"
  • "mc56f81646"
  • "mc56f81648"
  • "mc56f81666"
  • "mc56f81668"
  • "mc56f81746"
  • "mc56f81748"
  • "mc56f81766"
  • "mc56f81768"
  • "mc56f81866"
  • "mc56f81868"
  • "mcxa132"
  • "mcxa133"
  • "mcxa142"
  • "mcxa143"
  • "mcxa144"
  • "mcxa145"
  • "mcxa146"
  • "mcxa152"
  • "mcxa153"
  • "mcxa154"
  • "mcxa155"
  • "mcxa156"
  • "mcxn235"
  • "mcxn236"
  • "mcxn546"
  • "mcxn547"
  • "mcxn946"
  • "mcxn947"
  • "mcxw716a"
  • "mcxw716c"
  • "mimxrt533s"
  • "mimxrt555s"
  • "mimxrt595s"
  • "mimxrt685s"
  • "mimxrt798s"
  • "mwct2012"
  • "mwct2012a"
  • "mwct20d2"
  • "mwct20d2a"
  • "nhs52s04"
  • "rw610"
  • "rw612"
  • "k32w1xx"
  • "kw45xx"
  • "lpc550x"
  • "lpc551x"
  • "lpc552x"
  • "lpc553x"
  • "lpc55s0x"
  • "lpc55s1x"
  • "lpc55s2x"
  • "lpc55s3x"
  • "lpc55s6x"
  • "mc56f816xx"
  • "mc56f817xx"
  • "mc56f818xx"
  • "mcxa1xx"
  • "mcxn23x"
  • "mcxn9xx"
  • "mcxn94x"
  • "mcxw71xx"
  • "rt5xx"
  • "rt6xx"
  • "rt7xx"
  • "mwct2x12"
  • "mwct2xd2"
  • "nhs52sxx"
  • "rw61x"

MCU revision

Type: enum (of string)

Revision of silicon. The 'latest' name, means most current revision.

Must be one of:

  • "a0"
  • "a1"
  • "latest"

Application target

Type: enum (of string)

Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.

Must be one of:

  • "xip"
  • "load-to-ram"
  • "Internal flash (XIP)"
  • "External flash (XIP)"
  • "Internal Flash (XIP)"
  • "External Flash (XIP)"
  • "RAM"
  • "ram"

Type of boot image authentication

Type: enum (of string)

Specification of final master boot image authentication.

Must be one of:

  • "plain"
  • "crc"
  • "signed"
  • "signed-encrypted"
  • "signed-nxp"
  • "nxp_signed"
  • "Plain"
  • "CRC"
  • "Signed"
  • "Encrypted + Signed"
  • "NXP Signed"
  • "NXP signed"
  • "encrypted"

Output Image name

Type: stringFormat: file_name

The path for result binary file.

Plain application image

Type: stringFormat: file

The input application image to by modified to Master Boot Image.

The list of additional binaries

Type: array of object

This is software future of RTxxx family that NXP SDK startup code(not ROM) could load additional images.

No Additional Items

Each item of this array must be:

Type: object

Binary file

Type: stringFormat: file

The binary file to be added to final application.

Destination address

Type: string or numberFormat: number

Destination address in RAM of additional binary.

Enable load

Type: boolean

Enabler to load/use the image.

Loading address of application

Type: number or string

Application loading address in RAM if not XiP, otherwise address of load in XiP.

TrustZone enable option

Type: boolean

If not specified, the Trust zone is disabled.

TrustZone Customization file

Type: stringFormat: optional_file

If not specified, but TrustZone is enabled(enableTrustZone) the default values are used.

Certificate Block binary/config file

Type: stringFormat: file

Path to certificate block binary or config file.

Main Certificate private key

Type: stringFormat: file

Main Certificate private key used to sign certificate. It can be replaced by signProvider key.

Main Certificate private key

Type: stringFormat: file

Main Certificate private key used to sign certificate. It can be replaced by signProvider key.

Signature Provider

Type: string

Signature provider configuration in format 'type=<identifier>;<key1>=<value1>;<key2>=<value2>'.

Enable User HW key sharing

Type: boolean or string

Controlling secure hardware key bus. If enabled(1), then it is possible to access keys on hardware secure bus from non-secure application, else non-secure application will read zeros.

The Key store data file

Type: stringFormat: optional_file

Optional KeyStore data file for included keystore in LoadToRam images. If defined the KeyStore is added into MBI.

OTP Master key (HMAC Key)

Type: string

The OTP Master key that is used to compute HMAC encryption key. Could be defined as hex number and also as hex/binary file.\n Used algorithm by tool the get HMAC Key; AESENCRYPT (OTPMASTER_KEK, 0x00000000000000000000000000000000)

The output image encryption initial vector for encryption counter

Type: string

The initial vector for encryption counter. Could be defined as hex number and also as hex/binary file