Supported devices for MBI#
Supported execution targets are: XIP (Execute in place) and Load to RAM and image authentication types: Plain, CRC, Signed, Encrypted and NXP Signed.
The following table shows the supported image types for each device.
Target in the table represents outputImageExecutionTarget in the configuration file and authentication in the table represents outputImageAuthenticationType.
Targets |
xip |
xip |
xip |
xip |
xip |
load-to-ram |
load-to-ram |
load-to-ram |
load-to-ram |
load-to-ram |
|---|---|---|---|---|---|---|---|---|---|---|
Authentication |
plain |
crc |
signed |
signed-nxp |
signed-encrypted |
plain |
crc |
signed |
signed-nxp |
signed-encrypted |
k32w148, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
k32w148, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
k32w148, Revision: a2 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw45b41z5, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw45b41z5, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw45b41z5, Revision: a2 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw45b41z8, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw45b41z8, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw45b41z8, Revision: a2 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw45z41052, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw45z41052, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw45z41052, Revision: a2 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw45z41053, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw45z41053, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw45z41053, Revision: a2 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw45z41082, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw45z41082, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw45z41082, Revision: a2 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw45z41083, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw45z41083, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw45z41083, Revision: a2 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw47b42z83, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw47b42z83, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw47b42z96, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw47b42z96, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw47b42z97, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw47b42z97, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw47b42zb2, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw47b42zb2, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw47b42zb3, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw47b42zb3, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw47b42zb6, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw47b42zb6, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw47b42zb7, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw47b42zb7, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw47z42082, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw47z42082, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw47z42092, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw47z42092, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw47z420b2, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw47z420b2, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw47z420b3, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
kw47z420b3, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
lpc5502, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
|||
lpc5504, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
|||
lpc5506, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
|||
lpc5512, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
|||
lpc5514, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
|||
lpc5516, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
|||
lpc5526, Revision: 1a |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
|||
lpc5526, Revision: 1b |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
|||
lpc5528, Revision: 1a |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
|||
lpc5528, Revision: 1b |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
|||
lpc5534, Revision: 0a |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
lpc5534, Revision: 1a |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
lpc5536, Revision: 0a |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
lpc5536, Revision: 1a |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
lpc55s04, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
|||||
lpc55s06, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
|||||
lpc55s14, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
|||||
lpc55s16, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
|||||
lpc55s26, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
|||||
lpc55s26, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
|||||
lpc55s28, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
|||||
lpc55s28, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
|||||
lpc55s36, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
|||||
lpc55s36, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
|||||
lpc55s66, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
|||||
lpc55s66, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
|||||
lpc55s69, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
|||||
lpc55s69, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
|||||
mc56f81646, Revision: b1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||
mc56f81648, Revision: b1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||
mc56f81666, Revision: b1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||
mc56f81668, Revision: b1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||
mc56f81746, Revision: b1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||
mc56f81748, Revision: b1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||
mc56f81766, Revision: b1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||
mc56f81768, Revision: b1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||
mc56f81866, Revision: b1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||
mc56f81868, Revision: b1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||
mcxa132, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||
mcxa133, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||
mcxa142, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||
mcxa143, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||
mcxa144, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||
mcxa145, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||
mcxa146, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||
mcxa152, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||
mcxa153, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||
mcxa154, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||
mcxa155, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||
mcxa156, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||
mcxa275, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||
mcxa276, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||
mcxa345, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||
mcxa346, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||
mcxa355, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||
mcxa356, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||
mcxc041, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
|
mcxc141, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
|
mcxc142, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
|
mcxc143, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
|
mcxc144, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
|
mcxc242, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
|
mcxc243, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
|
mcxc244, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
|
mcxc443, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
|
mcxc444, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
|
mcxn235, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
||||||
mcxn236, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
||||||
mcxn546, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
|||||
mcxn546, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
|||||
mcxn547, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
|||||
mcxn547, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
|||||
mcxn946, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
|||||
mcxn946, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
|||||
mcxn947, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
|||||
mcxn947, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
|||||
mcxw235, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
|||||
mcxw236, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
|||||
mcxw716a, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
mcxw716a, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
mcxw716a, Revision: a2 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
mcxw716c, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
mcxw716c, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
mcxw716c, Revision: a2 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
mcxw727a, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
mcxw727a, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
mcxw727c, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
mcxw727c, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
mcxw727d, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
mcxw727d, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||||
mimxrt533s, Revision: a0 |
❌ |
❌ |
❌ |
|||||||
mimxrt533s, Revision: b0 |
❌ |
❌ |
❌ |
|||||||
mimxrt555s, Revision: a0 |
❌ |
❌ |
❌ |
|||||||
mimxrt555s, Revision: b0 |
❌ |
❌ |
❌ |
|||||||
mimxrt595s, Revision: a0 |
❌ |
❌ |
❌ |
|||||||
mimxrt595s, Revision: b0 |
❌ |
❌ |
❌ |
|||||||
mimxrt685s, Revision: a0 |
❌ |
❌ |
❌ |
|||||||
mimxrt685s, Revision: b0 |
❌ |
❌ |
❌ |
|||||||
mimxrt735s, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
||||||
mimxrt735s, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
||||||
mimxrt735s, Revision: b0 |
❌ |
❌ |
❌ |
❌ |
||||||
mimxrt758s, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
||||||
mimxrt758s, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
||||||
mimxrt758s, Revision: b0 |
❌ |
❌ |
❌ |
❌ |
||||||
mimxrt798s, Revision: a0 |
❌ |
❌ |
❌ |
❌ |
||||||
mimxrt798s, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
||||||
mimxrt798s, Revision: b0 |
❌ |
❌ |
❌ |
❌ |
||||||
mwct2012, Revision: b1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||
mwct2012a, Revision: b1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||
mwct20d2, Revision: b1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||
mwct20d2a, Revision: b1 |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
❌ |
||
nhs52s04, Revision: a4 |
❌ |
❌ |
❌ |
❌ |
❌ |
|||||
rw610, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
||||||
rw610, Revision: a2 |
❌ |
❌ |
❌ |
❌ |
||||||
rw612, Revision: a1 |
❌ |
❌ |
❌ |
❌ |
||||||
rw612, Revision: a2 |
❌ |
❌ |
❌ |
❌ |
Note
For LPC55xx (except for the LPC55S36 with external flash), MCXN9xx and MCXN23x the load-to-RAM images are intended only for recovery boot from 1-bit SPI flash.
Implementation details#
To handle the small differences between the MBI types. Mixin classes were used to define the common parts of the MBI. This definition of required mixins is stored in database for each family of devices. When you click on the supported MBI type in the table above, you will be pointed to the documentation of the specific MBI type. Naming convention for each MBI type is used here just for documentation purposes. For example: “MBI-A-IV-I-TZM-LA-EATZ-ECS” contains first letters of mixins used in the MBI, like App, ImageVersion, IVT, TrustZoneMandatory and others…
If you want to create MBI class directly you might use create_mbi_class function. The function takes two arguments, the first one is the MBI type and the second one is the device family. The method returns the class that can be used to create MBI image.
from spsdk.image.mbi.mbi import create_mbi_class
MbiClass = create_mbi_class("plain", "k32w1xx")
Exporting the image is done in six steps.
Validating the input data by calling the validate method.
Collecting the data by calling the collect_data method.
Optionally encrypting the image by calling the encrypt method.
Optionally do post encrypt update by calling the post_encrypt method.
Optionally sign the image by calling the sign method.
Finalize the image by calling the finalize method.
Supported configuration options#
Refer to the documentation below for the supported configuration options for each image type. Please note that the outputImageExecutionTarget and outputImageAuthenticationType must be filled in addition to the basic settings according to the table with supported devices.
outputImageExecutionTarget: xip # Application target., Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
outputImageAuthenticationType: signed # Type of boot image authentication., Specification of final master boot image authentication.
MBI-A-IZTL-LA-TZM-IST-EATZ#
MBI Mixins
Class name: plain_xip
MasterBootImage
Mbi_MixinApp
Mbi_MixinIvtZeroTotalLength
Mbi_MixinLoadAddress
Mbi_MixinTrustZoneMandatory
Mbi_MixinImageSubType
Mbi_ExportMixinAppTrustZone
MBI-A-IZTL-LA-TZM-IST-EATZ JSON schema
MBI-A-IZTL-LA-TZM-IST-EATZ YAML configuration template
# ============================================= YAML template plain_xip ==============================================
# ======================================================================================================================
# == MBI-A-IZTL-LA-TZM-IST-EATZ ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, a1, a2, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <signed-nxp, crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# --------------------------------===== Loading address of application [Required] =====---------------------------------
# Description: Application loading address in RAM if not XiP, otherwise address of load in XiP.
outputImageExecutionAddress: 0
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified the default values are used.
trustZonePresetFile: my_tz_custom.yaml
# -----------------------------------------===== Image SubType [Optional] =====-----------------------------------------
# Description: Image subtype determine the image use in MCU. "main" for main application, "nbu" for Narrow Band Unit
# image and "recovery" for recovery image type
# Possible options: <main, nbu, recovery>
outputImageSubtype: main
MBI-A-I-LA-TZM-IST-EATZ-ECS#
MBI Mixins
Class name: crc_xip
MasterBootImage
Mbi_MixinApp
Mbi_MixinIvt
Mbi_MixinLoadAddress
Mbi_MixinTrustZoneMandatory
Mbi_MixinImageSubType
Mbi_ExportMixinAppTrustZone
Mbi_ExportMixinCrcSign
MBI-A-I-LA-TZM-IST-EATZ-ECS JSON schema
MBI-A-I-LA-TZM-IST-EATZ-ECS YAML configuration template
# ============================================== YAML template crc_xip ===============================================
# ======================================================================================================================
# == MBI-A-I-LA-TZM-IST-EATZ-ECS ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, a1, a2, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <signed-nxp, crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# --------------------------------===== Loading address of application [Required] =====---------------------------------
# Description: Application loading address in RAM if not XiP, otherwise address of load in XiP.
outputImageExecutionAddress: 0
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified the default values are used.
trustZonePresetFile: my_tz_custom.yaml
# -----------------------------------------===== Image SubType [Optional] =====-----------------------------------------
# Description: Image subtype determine the image use in MCU. "main" for main application, "nbu" for Narrow Band Unit
# image and "recovery" for recovery image type
# Possible options: <main, nbu, recovery>
outputImageSubtype: main
MBI-A-I-LA-CBV-MD-EACBM-EES#
MBI Mixins
Class name: signed_xip
MasterBootImage
Mbi_MixinApp
Mbi_MixinIvt
Mbi_MixinLoadAddress
Mbi_MixinCertBlockV21
Mbi_MixinManifestDigest
Mbi_ExportMixinAppCertBlockManifest
Mbi_ExportMixinEccSign
MBI-A-I-LA-CBV-MD-EACBM-EES JSON schema
MBI-A-I-LA-CBV-MD-EACBM-EES YAML configuration template
# ============================================= YAML template signed_xip =============================================
# ======================================================================================================================
# == MBI-A-I-LA-CBV-MD-EACBM-EES ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, a1, a2, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <signed-nxp, crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# --------------------------------===== Loading address of application [Required] =====---------------------------------
# Description: Application loading address in RAM if not XiP, otherwise address of load in XiP.
outputImageExecutionAddress: 0
# -----------------------------===== Certificate Block binary/config file [Required] =====------------------------------
# Description: Path to certificate block binary or config file.
certBlock: cert_block.yaml
# -------------------------------------===== Signer configuration [Required] =====--------------------------------------
# Description: Signature provider configuration in format 'type=<sp_type>;<key1>=<value1>;<key2>=<value2>' or path to a
# private key.
signer: type=file;file_path=root_prv_key.pem
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified the default values are used.
trustZonePresetFile: my_tz_custom.yaml
# ---------------------------------------===== Firmware version. [Optional] =====---------------------------------------
# Description: Value compared with Secure_FW_Version monotonic counter value stored in protected memory (MCU specific).
# If value is lower than value in protected memory, then is image rejected (rollback protection).
firmwareVersion: 0
MBI-A-I-LA-CBV-MD-IST-EACBM-EES#
MBI Mixins
Class name: nxp_signed_xip
MasterBootImage
Mbi_MixinApp
Mbi_MixinIvt
Mbi_MixinLoadAddress
Mbi_MixinCertBlockV21
Mbi_MixinManifestDigest
Mbi_MixinImageSubType
Mbi_ExportMixinAppCertBlockManifest
Mbi_ExportMixinEccSign
MBI-A-I-LA-CBV-MD-IST-EACBM-EES JSON schema
MBI-A-I-LA-CBV-MD-IST-EACBM-EES YAML configuration template
# =========================================== YAML template nxp_signed_xip ===========================================
# ======================================================================================================================
# == MBI-A-I-LA-CBV-MD-IST-EACBM-EES ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, a1, a2, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <signed-nxp, crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# --------------------------------===== Loading address of application [Required] =====---------------------------------
# Description: Application loading address in RAM if not XiP, otherwise address of load in XiP.
outputImageExecutionAddress: 0
# -----------------------------===== Certificate Block binary/config file [Required] =====------------------------------
# Description: Path to certificate block binary or config file.
certBlock: cert_block.yaml
# -------------------------------------===== Signer configuration [Required] =====--------------------------------------
# Description: Signature provider configuration in format 'type=<sp_type>;<key1>=<value1>;<key2>=<value2>' or path to a
# private key.
signer: type=file;file_path=root_prv_key.pem
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified the default values are used.
trustZonePresetFile: my_tz_custom.yaml
# ---------------------------------------===== Firmware version. [Optional] =====---------------------------------------
# Description: Value compared with Secure_FW_Version monotonic counter value stored in protected memory (MCU specific).
# If value is lower than value in protected memory, then is image rejected (rollback protection).
firmwareVersion: 0
# -----------------------------------------===== Image SubType [Optional] =====-----------------------------------------
# Description: Image subtype determine the image use in MCU. "main" for main application, "nbu" for Narrow Band Unit
# image and "recovery" for recovery image type
# Possible options: <main, nbu, recovery>
outputImageSubtype: main
MBI-A-I-LA-TZM-IST-EATZ#
MBI Mixins
Class name: plain_xip
MasterBootImage
Mbi_MixinApp
Mbi_MixinIvt
Mbi_MixinLoadAddress
Mbi_MixinTrustZoneMandatory
Mbi_MixinImageSubType
Mbi_ExportMixinAppTrustZone
MBI-A-I-LA-TZM-IST-EATZ JSON schema
MBI-A-I-LA-TZM-IST-EATZ YAML configuration template
# ============================================= YAML template plain_xip ==============================================
# ======================================================================================================================
# == MBI-A-I-LA-TZM-IST-EATZ ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, a1, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <signed-nxp, crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# --------------------------------===== Loading address of application [Required] =====---------------------------------
# Description: Application loading address in RAM if not XiP, otherwise address of load in XiP.
outputImageExecutionAddress: 0
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified the default values are used.
trustZonePresetFile: my_tz_custom.yaml
# -----------------------------------------===== Image SubType [Optional] =====-----------------------------------------
# Description: Image subtype determine the image use in MCU. "main" for main application, "nbu" for Narrow Band Unit
# image and "recovery" for recovery image type
# Possible options: <main, nbu, recovery>
outputImageSubtype: main
MBI-A-IZTL-EA#
MBI Mixins
Class name: plain_xip
MasterBootImage
Mbi_MixinApp
Mbi_MixinIvtZeroTotalLength
Mbi_ExportMixinApp
MBI-A-IZTL-EA JSON schema
MBI-A-IZTL-EA YAML configuration template
# ============================================= YAML template plain_xip ==============================================
# ======================================================================================================================
# == MBI-A-IZTL-EA ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
MBI-A-I-EA-ECS#
MBI Mixins
Class name: crc_xip
MasterBootImage
Mbi_MixinApp
Mbi_MixinIvt
Mbi_ExportMixinApp
Mbi_ExportMixinCrcSign
MBI-A-I-EA-ECS JSON schema
MBI-A-I-EA-ECS YAML configuration template
# ============================================== YAML template crc_xip ===============================================
# ======================================================================================================================
# == MBI-A-I-EA-ECS ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
MBI-A-I-LA-EA-ECS#
MBI Mixins
Class name: crc_ram
MasterBootImage
Mbi_MixinApp
Mbi_MixinIvt
Mbi_MixinLoadAddress
Mbi_ExportMixinApp
Mbi_ExportMixinCrcSign
MBI-A-I-LA-EA-ECS JSON schema
MBI-A-I-LA-EA-ECS YAML configuration template
# ============================================== YAML template crc_ram ===============================================
# ======================================================================================================================
# == MBI-A-I-LA-EA-ECS ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# --------------------------------===== Loading address of application [Required] =====---------------------------------
# Description: Application loading address in RAM if not XiP, otherwise address of load in XiP.
outputImageExecutionAddress: 0
MBI-A-IV-IZTL-LA-EA#
MBI Mixins
Class name: plain_xip
MasterBootImage
Mbi_MixinApp
Mbi_MixinImageVersion
Mbi_MixinIvtZeroTotalLength
Mbi_MixinLoadAddress
Mbi_ExportMixinApp
MBI-A-IV-IZTL-LA-EA JSON schema
MBI-A-IV-IZTL-LA-EA YAML configuration template
# ============================================= YAML template plain_xip ==============================================
# ======================================================================================================================
# == MBI-A-IV-IZTL-LA-EA ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <0a, 1a, latest>
revision: 0a
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# ----------------------------------------===== Image version. [Optional] =====-----------------------------------------
# Description: Image version is used for dual boot. The boot ROM decides which image to boot first based on the image
# version. It boots the one with the newer image version first, and in case of a failure, it boots the older one.
imageVersion: 0
# --------------------------------===== Loading address of application [Required] =====---------------------------------
# Description: Application loading address in RAM if not XiP, otherwise address of load in XiP.
outputImageExecutionAddress: 0
MBI-A-IV-I-LA-EA#
MBI Mixins
Class name: plain_ram
MasterBootImage
Mbi_MixinApp
Mbi_MixinImageVersion
Mbi_MixinIvt
Mbi_MixinLoadAddress
Mbi_ExportMixinApp
MBI-A-IV-I-LA-EA JSON schema
MBI-A-IV-I-LA-EA YAML configuration template
# ============================================= YAML template plain_ram ==============================================
# ======================================================================================================================
# == MBI-A-IV-I-LA-EA ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <0a, 1a, latest>
revision: 0a
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# ----------------------------------------===== Image version. [Optional] =====-----------------------------------------
# Description: Image version is used for dual boot. The boot ROM decides which image to boot first based on the image
# version. It boots the one with the newer image version first, and in case of a failure, it boots the older one.
imageVersion: 0
# --------------------------------===== Loading address of application [Required] =====---------------------------------
# Description: Application loading address in RAM if not XiP, otherwise address of load in XiP.
outputImageExecutionAddress: 0
MBI-A-IV-I-LA-EA-ECS#
MBI Mixins
Class name: crc_ram
MasterBootImage
Mbi_MixinApp
Mbi_MixinImageVersion
Mbi_MixinIvt
Mbi_MixinLoadAddress
Mbi_ExportMixinApp
Mbi_ExportMixinCrcSign
MBI-A-IV-I-LA-EA-ECS JSON schema
MBI-A-IV-I-LA-EA-ECS YAML configuration template
# ============================================== YAML template crc_ram ===============================================
# ======================================================================================================================
# == MBI-A-IV-I-LA-EA-ECS ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <0a, 1a, latest>
revision: 0a
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# ----------------------------------------===== Image version. [Optional] =====-----------------------------------------
# Description: Image version is used for dual boot. The boot ROM decides which image to boot first based on the image
# version. It boots the one with the newer image version first, and in case of a failure, it boots the older one.
imageVersion: 0
# --------------------------------===== Loading address of application [Required] =====---------------------------------
# Description: Application loading address in RAM if not XiP, otherwise address of load in XiP.
outputImageExecutionAddress: 0
MBI-A-IZTL-TZ-HK-EATZ#
MBI Mixins
Class name: plain_xip
MasterBootImage
Mbi_MixinApp
Mbi_MixinIvtZeroTotalLength
Mbi_MixinTrustZone
Mbi_MixinHwKey
Mbi_ExportMixinAppTrustZone
MBI-A-IZTL-TZ-HK-EATZ JSON schema
MBI-A-IZTL-TZ-HK-EATZ YAML configuration template
# ============================================= YAML template plain_xip ==============================================
# ======================================================================================================================
# == MBI-A-IZTL-TZ-HK-EATZ ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a1, latest>
revision: a1
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# ------------------------------------===== TrustZone enable option [Optional] =====------------------------------------
# Description: If not specified, the Trust zone is disabled.
enableTrustZone: false
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified, but TrustZone is enabled(enableTrustZone) the default values are used.
trustZonePresetFile: my_tz_custom.yaml
# ----------------------------------===== Enable User HW key sharing [Required] =====-----------------------------------
# Description: Controlling secure hardware key bus. If enabled(1), then it is possible to access keys on hardware secure
# bus from non-secure application, else non-secure application will read zeros.
enableHwUserModeKeys: false
MBI-A-I-TZ-LA-EATZ-ECS#
MBI Mixins
Class name: crc_ram
MasterBootImage
Mbi_MixinApp
Mbi_MixinIvt
Mbi_MixinTrustZone
Mbi_MixinLoadAddress
Mbi_ExportMixinAppTrustZone
Mbi_ExportMixinCrcSign
MBI-A-I-TZ-LA-EATZ-ECS JSON schema
MBI-A-I-TZ-LA-EATZ-ECS YAML configuration template
# ============================================== YAML template crc_ram ===============================================
# ======================================================================================================================
# == MBI-A-I-TZ-LA-EATZ-ECS ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a1, latest>
revision: a1
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# ------------------------------------===== TrustZone enable option [Optional] =====------------------------------------
# Description: If not specified, the Trust zone is disabled.
enableTrustZone: false
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified, but TrustZone is enabled(enableTrustZone) the default values are used.
trustZonePresetFile: my_tz_custom.yaml
# --------------------------------===== Loading address of application [Required] =====---------------------------------
# Description: Application loading address in RAM if not XiP, otherwise address of load in XiP.
outputImageExecutionAddress: 0
MBI-A-I-LA-TZ-HK-EATZ-ECS#
MBI Mixins
Class name: crc_xip
MasterBootImage
Mbi_MixinApp
Mbi_MixinIvt
Mbi_MixinLoadAddress
Mbi_MixinTrustZone
Mbi_MixinHwKey
Mbi_ExportMixinAppTrustZone
Mbi_ExportMixinCrcSign
MBI-A-I-LA-TZ-HK-EATZ-ECS JSON schema
MBI-A-I-LA-TZ-HK-EATZ-ECS YAML configuration template
# ============================================== YAML template crc_xip ===============================================
# ======================================================================================================================
# == MBI-A-I-LA-TZ-HK-EATZ-ECS ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a1, latest>
revision: a1
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# --------------------------------===== Loading address of application [Required] =====---------------------------------
# Description: Application loading address in RAM if not XiP, otherwise address of load in XiP.
outputImageExecutionAddress: 0
# ------------------------------------===== TrustZone enable option [Optional] =====------------------------------------
# Description: If not specified, the Trust zone is disabled.
enableTrustZone: false
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified, but TrustZone is enabled(enableTrustZone) the default values are used.
trustZonePresetFile: my_tz_custom.yaml
# ----------------------------------===== Enable User HW key sharing [Required] =====-----------------------------------
# Description: Controlling secure hardware key bus. If enabled(1), then it is possible to access keys on hardware secure
# bus from non-secure application, else non-secure application will read zeros.
enableHwUserModeKeys: false
MBI-A-I-TZ-LA-CBV-EATZCB-ERS#
MBI Mixins
Class name: signed_ram
MasterBootImage
Mbi_MixinApp
Mbi_MixinIvt
Mbi_MixinTrustZone
Mbi_MixinLoadAddress
Mbi_MixinCertBlockV1
Mbi_ExportMixinAppTrustZoneCertBlock
Mbi_ExportMixinRsaSign
MBI-A-I-TZ-LA-CBV-EATZCB-ERS JSON schema
MBI-A-I-TZ-LA-CBV-EATZCB-ERS YAML configuration template
# ============================================= YAML template signed_ram =============================================
# ======================================================================================================================
# == MBI-A-I-TZ-LA-CBV-EATZCB-ERS ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a1, latest>
revision: a1
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# ------------------------------------===== TrustZone enable option [Optional] =====------------------------------------
# Description: If not specified, the Trust zone is disabled.
enableTrustZone: false
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified, but TrustZone is enabled(enableTrustZone) the default values are used.
trustZonePresetFile: my_tz_custom.yaml
# --------------------------------===== Loading address of application [Required] =====---------------------------------
# Description: Application loading address in RAM if not XiP, otherwise address of load in XiP.
outputImageExecutionAddress: 0
# -----------------------------===== Certificate Block binary/config file [Required] =====------------------------------
# Description: Path to certificate block binary or config file.
certBlock: cert_block.yaml
# -------------------------------------===== Signer configuration [Required] =====--------------------------------------
# Description: Signature provider configuration in format 'type=<sp_type>;<key1>=<value1>;<key2>=<value2>' or path to a
# private key.
signer: type=file;file_path=root_prv_key.pem
MBI-A-I-LA-TZ-CBV-HK-EATZCB-ERS#
MBI Mixins
Class name: signed_xip
MasterBootImage
Mbi_MixinApp
Mbi_MixinIvt
Mbi_MixinLoadAddress
Mbi_MixinTrustZone
Mbi_MixinCertBlockV1
Mbi_MixinHwKey
Mbi_ExportMixinAppTrustZoneCertBlock
Mbi_ExportMixinRsaSign
MBI-A-I-LA-TZ-CBV-HK-EATZCB-ERS JSON schema
MBI-A-I-LA-TZ-CBV-HK-EATZCB-ERS YAML configuration template
# ============================================= YAML template signed_xip =============================================
# ======================================================================================================================
# == MBI-A-I-LA-TZ-CBV-HK-EATZCB-ERS ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a1, latest>
revision: a1
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# --------------------------------===== Loading address of application [Required] =====---------------------------------
# Description: Application loading address in RAM if not XiP, otherwise address of load in XiP.
outputImageExecutionAddress: 0
# ------------------------------------===== TrustZone enable option [Optional] =====------------------------------------
# Description: If not specified, the Trust zone is disabled.
enableTrustZone: false
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified, but TrustZone is enabled(enableTrustZone) the default values are used.
trustZonePresetFile: my_tz_custom.yaml
# -----------------------------===== Certificate Block binary/config file [Required] =====------------------------------
# Description: Path to certificate block binary or config file.
certBlock: cert_block.yaml
# -------------------------------------===== Signer configuration [Required] =====--------------------------------------
# Description: Signature provider configuration in format 'type=<sp_type>;<key1>=<value1>;<key2>=<value2>' or path to a
# private key.
signer: type=file;file_path=root_prv_key.pem
# ----------------------------------===== Enable User HW key sharing [Required] =====-----------------------------------
# Description: Controlling secure hardware key bus. If enabled(1), then it is possible to access keys on hardware secure
# bus from non-secure application, else non-secure application will read zeros.
enableHwUserModeKeys: false
MBI-A-IZTL-TZ-EATZ#
MBI Mixins
Class name: plain_xip
MasterBootImage
Mbi_MixinApp
Mbi_MixinIvtZeroTotalLength
Mbi_MixinTrustZone
Mbi_ExportMixinAppTrustZone
MBI-A-IZTL-TZ-EATZ JSON schema
MBI-A-IZTL-TZ-EATZ YAML configuration template
# ============================================= YAML template plain_xip ==============================================
# ======================================================================================================================
# == MBI-A-IZTL-TZ-EATZ ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, a1, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# ------------------------------------===== TrustZone enable option [Optional] =====------------------------------------
# Description: If not specified, the Trust zone is disabled.
enableTrustZone: false
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified, but TrustZone is enabled(enableTrustZone) the default values are used.
trustZonePresetFile: my_tz_custom.yaml
MBI-A-I-TZ-EATZ-ECS#
MBI Mixins
Class name: crc_xip
MasterBootImage
Mbi_MixinApp
Mbi_MixinIvt
Mbi_MixinTrustZone
Mbi_ExportMixinAppTrustZone
Mbi_ExportMixinCrcSign
MBI-A-I-TZ-EATZ-ECS JSON schema
MBI-A-I-TZ-EATZ-ECS YAML configuration template
# ============================================== YAML template crc_xip ===============================================
# ======================================================================================================================
# == MBI-A-I-TZ-EATZ-ECS ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, a1, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# ------------------------------------===== TrustZone enable option [Optional] =====------------------------------------
# Description: If not specified, the Trust zone is disabled.
enableTrustZone: false
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified, but TrustZone is enabled(enableTrustZone) the default values are used.
trustZonePresetFile: my_tz_custom.yaml
MBI-A-I-TZ-CBV-EATZCB-ERS#
MBI Mixins
Class name: signed_xip
MasterBootImage
Mbi_MixinApp
Mbi_MixinIvt
Mbi_MixinTrustZone
Mbi_MixinCertBlockV1
Mbi_ExportMixinAppTrustZoneCertBlock
Mbi_ExportMixinRsaSign
MBI-A-I-TZ-CBV-EATZCB-ERS JSON schema
MBI-A-I-TZ-CBV-EATZCB-ERS YAML configuration template
# ============================================= YAML template signed_xip =============================================
# ======================================================================================================================
# == MBI-A-I-TZ-CBV-EATZCB-ERS ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, a1, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# ------------------------------------===== TrustZone enable option [Optional] =====------------------------------------
# Description: If not specified, the Trust zone is disabled.
enableTrustZone: false
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified, but TrustZone is enabled(enableTrustZone) the default values are used.
trustZonePresetFile: my_tz_custom.yaml
# -----------------------------===== Certificate Block binary/config file [Required] =====------------------------------
# Description: Path to certificate block binary or config file.
certBlock: cert_block.yaml
# -------------------------------------===== Signer configuration [Required] =====--------------------------------------
# Description: Signature provider configuration in format 'type=<sp_type>;<key1>=<value1>;<key2>=<value2>' or path to a
# private key.
signer: type=file;file_path=root_prv_key.pem
MBI-A-IV-IZTL-TZM-LA-EATZ#
MBI Mixins
Class name: plain_xip
MasterBootImage
Mbi_MixinApp
Mbi_MixinImageVersion
Mbi_MixinIvtZeroTotalLength
Mbi_MixinTrustZoneMandatory
Mbi_MixinLoadAddress
Mbi_ExportMixinAppTrustZone
MBI-A-IV-IZTL-TZM-LA-EATZ JSON schema
MBI-A-IV-IZTL-TZM-LA-EATZ YAML configuration template
# ============================================= YAML template plain_xip ==============================================
# ======================================================================================================================
# == MBI-A-IV-IZTL-TZM-LA-EATZ ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, a1, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# ----------------------------------------===== Image version. [Optional] =====-----------------------------------------
# Description: Image version is used for dual boot. The boot ROM decides which image to boot first based on the image
# version. It boots the one with the newer image version first, and in case of a failure, it boots the older one.
imageVersion: 0
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified the default values are used.
trustZonePresetFile: my_tz_custom.yaml
# --------------------------------===== Loading address of application [Required] =====---------------------------------
# Description: Application loading address in RAM if not XiP, otherwise address of load in XiP.
outputImageExecutionAddress: 0
MBI-A-IV-I-TZM-LA-EATZ#
MBI Mixins
Class name: plain_ram
MasterBootImage
Mbi_MixinApp
Mbi_MixinImageVersion
Mbi_MixinIvt
Mbi_MixinTrustZoneMandatory
Mbi_MixinLoadAddress
Mbi_ExportMixinAppTrustZone
MBI-A-IV-I-TZM-LA-EATZ JSON schema
MBI-A-IV-I-TZM-LA-EATZ YAML configuration template
# ============================================= YAML template plain_ram ==============================================
# ======================================================================================================================
# == MBI-A-IV-I-TZM-LA-EATZ ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, a1, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# ----------------------------------------===== Image version. [Optional] =====-----------------------------------------
# Description: Image version is used for dual boot. The boot ROM decides which image to boot first based on the image
# version. It boots the one with the newer image version first, and in case of a failure, it boots the older one.
imageVersion: 0
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified the default values are used.
trustZonePresetFile: my_tz_custom.yaml
# --------------------------------===== Loading address of application [Required] =====---------------------------------
# Description: Application loading address in RAM if not XiP, otherwise address of load in XiP.
outputImageExecutionAddress: 0
MBI-A-IV-I-TZM-LA-EATZ-ECS#
MBI Mixins
Class name: crc_ram
MasterBootImage
Mbi_MixinApp
Mbi_MixinImageVersion
Mbi_MixinIvt
Mbi_MixinTrustZoneMandatory
Mbi_MixinLoadAddress
Mbi_ExportMixinAppTrustZone
Mbi_ExportMixinCrcSign
MBI-A-IV-I-TZM-LA-EATZ-ECS JSON schema
MBI-A-IV-I-TZM-LA-EATZ-ECS YAML configuration template
# ============================================== YAML template crc_ram ===============================================
# ======================================================================================================================
# == MBI-A-IV-I-TZM-LA-EATZ-ECS ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, a1, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# ----------------------------------------===== Image version. [Optional] =====-----------------------------------------
# Description: Image version is used for dual boot. The boot ROM decides which image to boot first based on the image
# version. It boots the one with the newer image version first, and in case of a failure, it boots the older one.
imageVersion: 0
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified the default values are used.
trustZonePresetFile: my_tz_custom.yaml
# --------------------------------===== Loading address of application [Required] =====---------------------------------
# Description: Application loading address in RAM if not XiP, otherwise address of load in XiP.
outputImageExecutionAddress: 0
MBI-A-IV-I-CBV-M-LA-FV-EACBM-EES#
MBI Mixins
Class name: signed_xip
MasterBootImage
Mbi_MixinApp
Mbi_MixinImageVersion
Mbi_MixinIvt
Mbi_MixinCertBlockV21
Mbi_MixinManifest
Mbi_MixinLoadAddress
Mbi_MixinFwVersion
Mbi_ExportMixinAppCertBlockManifest
Mbi_ExportMixinEccSign
MBI-A-IV-I-CBV-M-LA-FV-EACBM-EES JSON schema
MBI-A-IV-I-CBV-M-LA-FV-EACBM-EES YAML configuration template
# ============================================= YAML template signed_xip =============================================
# ======================================================================================================================
# == MBI-A-IV-I-CBV-M-LA-FV-EACBM-EES ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, a1, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# ----------------------------------------===== Image version. [Optional] =====-----------------------------------------
# Description: Image version is used for dual boot. The boot ROM decides which image to boot first based on the image
# version. It boots the one with the newer image version first, and in case of a failure, it boots the older one.
imageVersion: 0
# -----------------------------===== Certificate Block binary/config file [Required] =====------------------------------
# Description: Path to certificate block binary or config file.
certBlock: cert_block.yaml
# -------------------------------------===== Signer configuration [Required] =====--------------------------------------
# Description: Signature provider configuration in format 'type=<sp_type>;<key1>=<value1>;<key2>=<value2>' or path to a
# private key.
signer: type=file;file_path=root_prv_key.pem
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified the default values are used.
trustZonePresetFile: my_tz_custom.yaml
# ---------------------------------------===== Firmware version. [Optional] =====---------------------------------------
# Description: Value compared with Secure_FW_Version monotonic counter value stored in protected memory (MCU specific).
# If value is lower than value in protected memory, then is image rejected (rollback protection).
firmwareVersion: 0
# --------------------------------===== Loading address of application [Required] =====---------------------------------
# Description: Application loading address in RAM if not XiP, otherwise address of load in XiP.
outputImageExecutionAddress: 0
MBI-A-B-F-EABF#
MBI Mixins
Class name: plain_xip
MasterBootImage
Mbi_MixinApp
Mbi_MixinBca
Mbi_MixinFcf
Mbi_ExportMixinAppBcaFcf
MBI-A-B-F-EABF JSON schema
MBI-A-B-F-EABF YAML configuration template
# ============================================= YAML template plain_xip ==============================================
# ======================================================================================================================
# == MBI-A-B-F-EABF ==
# Flash Configuration Field settings. Default values are always loaded from application first.
# FCF can be provided in one of three ways:
# 1. As a nested dictionary under the 'fcf' key - copy values directly from the FCF.YAML template
# 2. As a path to a YAML file containing FCF configuration - use 'fcf: path/to/fcf.yaml'
# 3. As a path to a binary FCF file - use 'fcf: path/to/fcf.bin'
#
# If any FCF configuration is provided, it will update the application values accordingly. The binary option completely
# replaces the FCF content, while the YAML and dictionary options selectively update FCF register values.
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <b1, latest>
revision: b1
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
bca: path/to/bca.yaml
fcf: path/to/fcf.yaml
MBI-A-F-B-EABF-ECSB#
MBI Mixins
Class name: crc_xip
MasterBootImage
Mbi_MixinApp
Mbi_MixinFcf
Mbi_MixinBca
Mbi_ExportMixinAppBcaFcf
Mbi_ExportMixinCrcSignBca
MBI-A-F-B-EABF-ECSB JSON schema
MBI-A-F-B-EABF-ECSB YAML configuration template
# ============================================== YAML template crc_xip ===============================================
# ======================================================================================================================
# == MBI-A-F-B-EABF-ECSB ==
# Boot Configuration Area settings. Default values are always loaded from application first.
# BCA can be provided in one of three ways:
# 1. As a nested dictionary under the 'bca' key - copy values directly from the BCA.YAML template
# 2. As a path to a YAML file containing BCA configuration - use 'bca: path/to/bca.yaml'
# 3. As a path to a binary BCA file - use 'bca: path/to/bca.bin'
#
# If any BCA configuration is provided, it will update the application values accordingly. The binary option completely
# replaces the BCA content, while the YAML and dictionary options selectively update BCA register values.
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <b1, latest>
revision: b1
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
fcf: path/to/fcf.yaml
bca: path/to/bca.yaml
MBI-A-B-F-CBV-EABF-EESV#
MBI Mixins
Class name: signed_xip
MasterBootImage
Mbi_MixinApp
Mbi_MixinBca
Mbi_MixinFcf
Mbi_MixinCertBlockVx
Mbi_ExportMixinAppBcaFcf
Mbi_ExportMixinEccSignVx
MBI-A-B-F-CBV-EABF-EESV JSON schema
MBI-A-B-F-CBV-EABF-EESV YAML configuration template
# ============================================= YAML template signed_xip =============================================
# ======================================================================================================================
# == MBI-A-B-F-CBV-EABF-EESV ==
# Flash Configuration Field settings. Default values are always loaded from application first.
# FCF can be provided in one of three ways:
# 1. As a nested dictionary under the 'fcf' key - copy values directly from the FCF.YAML template
# 2. As a path to a YAML file containing FCF configuration - use 'fcf: path/to/fcf.yaml'
# 3. As a path to a binary FCF file - use 'fcf: path/to/fcf.bin'
#
# If any FCF configuration is provided, it will update the application values accordingly. The binary option completely
# replaces the FCF content, while the YAML and dictionary options selectively update FCF register values.
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <b1, latest>
revision: b1
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
bca: path/to/bca.yaml
fcf: path/to/fcf.yaml
# ---------------------------------===== Certificate Block binary file [Required] =====---------------------------------
# Description: Path to certificate block.
certBlock: cert_block.bin
# --------------===== True to append SHA256 hash [0:127] at the end of certificate block [Optional] =====---------------
# Description: Not mandatory if the hash is written in OTP
addCertHash: true
# -------------------------------------===== Signer configuration [Required] =====--------------------------------------
# Description: Signature provider configuration in format 'type=<sp_type>;<key1>=<value1>;<key2>=<value2>' or path to a
# private key.
signer: type=file;file_path=root_prv_key.pem
# -------------------------------------===== Generate only header [Optional] =====--------------------------------------
# Description: Build only the boot headers (Vector table, BCA, FCB) 0x0..0x800 binary without the application. This is
# needed for device HSM provisioning file in case the user set ROP2, ROP3.
justHeader: false
MBI-A-F-EABF#
MBI Mixins
Class name: plain_xip
MasterBootImage
Mbi_MixinApp
Mbi_MixinFcf
Mbi_ExportMixinAppBcaFcf
MBI-A-F-EABF JSON schema
MBI-A-F-EABF YAML configuration template
# ============================================= YAML template plain_xip ==============================================
# ======================================================================================================================
# == MBI-A-F-EABF ==
# Flash Configuration Field settings. Default values are always loaded from application first.
# FCF can be provided in one of three ways:
# 1. As a nested dictionary under the 'fcf' key - copy values directly from the FCF.YAML template
# 2. As a path to a YAML file containing FCF configuration - use 'fcf: path/to/fcf.yaml'
# 3. As a path to a binary FCF file - use 'fcf: path/to/fcf.bin'
#
# If any FCF configuration is provided, it will update the application values accordingly. The binary option completely
# replaces the FCF content, while the YAML and dictionary options selectively update FCF register values.
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <b1, latest>
revision: b1
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
fcf: path/to/fcf.yaml
MBI-A-IZTL-IV-EA#
MBI Mixins
Class name: plain_xip
MasterBootImage
Mbi_MixinApp
Mbi_MixinIvtZeroTotalLength
Mbi_MixinImageVersion
Mbi_ExportMixinApp
MBI-A-IZTL-IV-EA JSON schema
MBI-A-IZTL-IV-EA YAML configuration template
# ============================================= YAML template plain_xip ==============================================
# ======================================================================================================================
# == MBI-A-IZTL-IV-EA ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# ----------------------------------------===== Image version. [Optional] =====-----------------------------------------
# Description: Image version is used for dual boot. The boot ROM decides which image to boot first based on the image
# version. It boots the one with the newer image version first, and in case of a failure, it boots the older one.
imageVersion: 0
MBI-A-I-IV-EA-ECS#
MBI Mixins
Class name: crc_xip
MasterBootImage
Mbi_MixinApp
Mbi_MixinIvt
Mbi_MixinImageVersion
Mbi_ExportMixinApp
Mbi_ExportMixinCrcSign
MBI-A-I-IV-EA-ECS JSON schema
MBI-A-I-IV-EA-ECS YAML configuration template
# ============================================== YAML template crc_xip ===============================================
# ======================================================================================================================
# == MBI-A-I-IV-EA-ECS ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# ----------------------------------------===== Image version. [Optional] =====-----------------------------------------
# Description: Image version is used for dual boot. The boot ROM decides which image to boot first based on the image
# version. It boots the one with the newer image version first, and in case of a failure, it boots the older one.
imageVersion: 0
MBI-A-I-IV-EA#
MBI Mixins
Class name: plain_xip
MasterBootImage
Mbi_MixinApp
Mbi_MixinIvt
Mbi_MixinImageVersion
Mbi_ExportMixinApp
MBI-A-I-IV-EA JSON schema
MBI-A-I-IV-EA YAML configuration template
# ============================================= YAML template plain_xip ==============================================
# ======================================================================================================================
# == MBI-A-I-IV-EA ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# ----------------------------------------===== Image version. [Optional] =====-----------------------------------------
# Description: Image version is used for dual boot. The boot ROM decides which image to boot first based on the image
# version. It boots the one with the newer image version first, and in case of a failure, it boots the older one.
imageVersion: 0
MBI-A-B-F-EA#
MBI Mixins
Class name: plain_xip
MasterBootImage
Mbi_MixinApp
Mbi_MixinBca
Mbi_MixinFcf
Mbi_ExportMixinApp
MBI-A-B-F-EA JSON schema
MBI-A-B-F-EA YAML configuration template
# ============================================= YAML template plain_xip ==============================================
# ======================================================================================================================
# == MBI-A-B-F-EA ==
# Flash Configuration Field settings. Default values are always loaded from application first.
# FCF can be provided in one of three ways:
# 1. As a nested dictionary under the 'fcf' key - copy values directly from the FCF.YAML template
# 2. As a path to a YAML file containing FCF configuration - use 'fcf: path/to/fcf.yaml'
# 3. As a path to a binary FCF file - use 'fcf: path/to/fcf.bin'
#
# If any FCF configuration is provided, it will update the application values accordingly. The binary option completely
# replaces the FCF content, while the YAML and dictionary options selectively update FCF register values.
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
bca: path/to/bca.yaml
fcf: path/to/fcf.yaml
MBI-A-IZTL-TZM-LA-IV-EATZ#
MBI Mixins
Class name: plain_xip
MasterBootImage
Mbi_MixinApp
Mbi_MixinIvtZeroTotalLength
Mbi_MixinTrustZoneMandatory
Mbi_MixinLoadAddress
Mbi_MixinImageVersion
Mbi_ExportMixinAppTrustZone
MBI-A-IZTL-TZM-LA-IV-EATZ JSON schema
MBI-A-IZTL-TZM-LA-IV-EATZ YAML configuration template
# ============================================= YAML template plain_xip ==============================================
# ======================================================================================================================
# == MBI-A-IZTL-TZM-LA-IV-EATZ ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified the default values are used.
trustZonePresetFile: my_tz_custom.yaml
# --------------------------------===== Loading address of application [Required] =====---------------------------------
# Description: Application loading address in RAM if not XiP, otherwise address of load in XiP.
outputImageExecutionAddress: 0
# ----------------------------------------===== Image version. [Optional] =====-----------------------------------------
# Description: Image version is used for dual boot. The boot ROM decides which image to boot first based on the image
# version. It boots the one with the newer image version first, and in case of a failure, it boots the older one.
imageVersion: 0
MBI-A-I-TZM-LA-IV-EATZ#
MBI Mixins
Class name: plain_ram
MasterBootImage
Mbi_MixinApp
Mbi_MixinIvt
Mbi_MixinTrustZoneMandatory
Mbi_MixinLoadAddress
Mbi_MixinImageVersion
Mbi_ExportMixinAppTrustZone
MBI-A-I-TZM-LA-IV-EATZ JSON schema
MBI-A-I-TZM-LA-IV-EATZ YAML configuration template
# ============================================= YAML template plain_ram ==============================================
# ======================================================================================================================
# == MBI-A-I-TZM-LA-IV-EATZ ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified the default values are used.
trustZonePresetFile: my_tz_custom.yaml
# --------------------------------===== Loading address of application [Required] =====---------------------------------
# Description: Application loading address in RAM if not XiP, otherwise address of load in XiP.
outputImageExecutionAddress: 0
# ----------------------------------------===== Image version. [Optional] =====-----------------------------------------
# Description: Image version is used for dual boot. The boot ROM decides which image to boot first based on the image
# version. It boots the one with the newer image version first, and in case of a failure, it boots the older one.
imageVersion: 0
MBI-A-I-TZM-LA-IV-EATZ-ECS#
MBI Mixins
Class name: crc_ram
MasterBootImage
Mbi_MixinApp
Mbi_MixinIvt
Mbi_MixinTrustZoneMandatory
Mbi_MixinLoadAddress
Mbi_MixinImageVersion
Mbi_ExportMixinAppTrustZone
Mbi_ExportMixinCrcSign
MBI-A-I-TZM-LA-IV-EATZ-ECS JSON schema
MBI-A-I-TZM-LA-IV-EATZ-ECS YAML configuration template
# ============================================== YAML template crc_ram ===============================================
# ======================================================================================================================
# == MBI-A-I-TZM-LA-IV-EATZ-ECS ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified the default values are used.
trustZonePresetFile: my_tz_custom.yaml
# --------------------------------===== Loading address of application [Required] =====---------------------------------
# Description: Application loading address in RAM if not XiP, otherwise address of load in XiP.
outputImageExecutionAddress: 0
# ----------------------------------------===== Image version. [Optional] =====-----------------------------------------
# Description: Image version is used for dual boot. The boot ROM decides which image to boot first based on the image
# version. It boots the one with the newer image version first, and in case of a failure, it boots the older one.
imageVersion: 0
MBI-A-I-LA-CBV-MC-IST-IV-FV-EACBM-EES#
MBI Mixins
Class name: signed_xip
MasterBootImage
Mbi_MixinApp
Mbi_MixinIvt
Mbi_MixinLoadAddress
Mbi_MixinCertBlockV21
Mbi_MixinManifestCrc
Mbi_MixinImageSubType
Mbi_MixinImageVersion
Mbi_MixinFwVersion
Mbi_ExportMixinAppCertBlockManifest
Mbi_ExportMixinEccSign
MBI-A-I-LA-CBV-MC-IST-IV-FV-EACBM-EES JSON schema
MBI-A-I-LA-CBV-MC-IST-IV-FV-EACBM-EES YAML configuration template
# ============================================= YAML template signed_xip =============================================
# ======================================================================================================================
# == MBI-A-I-LA-CBV-MC-IST-IV-FV-EACBM-EES ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# --------------------------------===== Loading address of application [Required] =====---------------------------------
# Description: Application loading address in RAM if not XiP, otherwise address of load in XiP.
outputImageExecutionAddress: 0
# -----------------------------===== Certificate Block binary/config file [Required] =====------------------------------
# Description: Path to certificate block binary or config file.
certBlock: cert_block.yaml
# -------------------------------------===== Signer configuration [Required] =====--------------------------------------
# Description: Signature provider configuration in format 'type=<sp_type>;<key1>=<value1>;<key2>=<value2>' or path to a
# private key.
signer: type=file;file_path=root_prv_key.pem
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified the default values are used.
trustZonePresetFile: my_tz_custom.yaml
# ---------------------------------------===== Firmware version. [Optional] =====---------------------------------------
# Description: Value compared with Secure_FW_Version monotonic counter value stored in protected memory (MCU specific).
# If value is lower than value in protected memory, then is image rejected (rollback protection).
firmwareVersion: 0
# -----------------------------------------===== Image SubType [Optional] =====-----------------------------------------
# Description: Image subtype determine the image use in MCU. "main" for main application, "nbu" for Narrow Band Unit
# image and "recovery" for recovery image type
# Possible options: <main, nbu, recovery>
outputImageSubtype: main
# ----------------------------------------===== Image version. [Optional] =====-----------------------------------------
# Description: Image version is used for dual boot. The boot ROM decides which image to boot first based on the image
# version. It boots the one with the newer image version first, and in case of a failure, it boots the older one.
imageVersion: 0
MBI-A-I-CBV-MC-IST-LA-IV-FV-EACBM-EES#
MBI Mixins
Class name: signed_ram
MasterBootImage
Mbi_MixinApp
Mbi_MixinIvt
Mbi_MixinCertBlockV21
Mbi_MixinManifestCrc
Mbi_MixinImageSubType
Mbi_MixinLoadAddress
Mbi_MixinImageVersion
Mbi_MixinFwVersion
Mbi_ExportMixinAppCertBlockManifest
Mbi_ExportMixinEccSign
MBI-A-I-CBV-MC-IST-LA-IV-FV-EACBM-EES JSON schema
MBI-A-I-CBV-MC-IST-LA-IV-FV-EACBM-EES YAML configuration template
# ============================================= YAML template signed_ram =============================================
# ======================================================================================================================
# == MBI-A-I-CBV-MC-IST-LA-IV-FV-EACBM-EES ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# -----------------------------===== Certificate Block binary/config file [Required] =====------------------------------
# Description: Path to certificate block binary or config file.
certBlock: cert_block.yaml
# -------------------------------------===== Signer configuration [Required] =====--------------------------------------
# Description: Signature provider configuration in format 'type=<sp_type>;<key1>=<value1>;<key2>=<value2>' or path to a
# private key.
signer: type=file;file_path=root_prv_key.pem
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified the default values are used.
trustZonePresetFile: my_tz_custom.yaml
# ---------------------------------------===== Firmware version. [Optional] =====---------------------------------------
# Description: Value compared with Secure_FW_Version monotonic counter value stored in protected memory (MCU specific).
# If value is lower than value in protected memory, then is image rejected (rollback protection).
firmwareVersion: 0
# -----------------------------------------===== Image SubType [Optional] =====-----------------------------------------
# Description: Image subtype determine the image use in MCU. "main" for main application, "nbu" for Narrow Band Unit
# image and "recovery" for recovery image type
# Possible options: <main, nbu, recovery>
outputImageSubtype: main
# --------------------------------===== Loading address of application [Required] =====---------------------------------
# Description: Application loading address in RAM if not XiP, otherwise address of load in XiP.
outputImageExecutionAddress: 0
# ----------------------------------------===== Image version. [Optional] =====-----------------------------------------
# Description: Image version is used for dual boot. The boot ROM decides which image to boot first based on the image
# version. It boots the one with the newer image version first, and in case of a failure, it boots the older one.
imageVersion: 0
MBI-A-IZTL-TZM-IV-EATZ#
MBI Mixins
Class name: plain_xip
MasterBootImage
Mbi_MixinApp
Mbi_MixinIvtZeroTotalLength
Mbi_MixinTrustZoneMandatory
Mbi_MixinImageVersion
Mbi_ExportMixinAppTrustZone
MBI-A-IZTL-TZM-IV-EATZ JSON schema
MBI-A-IZTL-TZM-IV-EATZ YAML configuration template
# ============================================= YAML template plain_xip ==============================================
# ======================================================================================================================
# == MBI-A-IZTL-TZM-IV-EATZ ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, a1, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified the default values are used.
trustZonePresetFile: my_tz_custom.yaml
# ----------------------------------------===== Image version. [Optional] =====-----------------------------------------
# Description: Image version is used for dual boot. The boot ROM decides which image to boot first based on the image
# version. It boots the one with the newer image version first, and in case of a failure, it boots the older one.
imageVersion: 0
MBI-A-I-LA-TZM-IV-EATZ-ECS#
MBI Mixins
Class name: crc_xip
MasterBootImage
Mbi_MixinApp
Mbi_MixinIvt
Mbi_MixinLoadAddress
Mbi_MixinTrustZoneMandatory
Mbi_MixinImageVersion
Mbi_ExportMixinAppTrustZone
Mbi_ExportMixinCrcSign
MBI-A-I-LA-TZM-IV-EATZ-ECS JSON schema
MBI-A-I-LA-TZM-IV-EATZ-ECS YAML configuration template
# ============================================== YAML template crc_xip ===============================================
# ======================================================================================================================
# == MBI-A-I-LA-TZM-IV-EATZ-ECS ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, a1, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# --------------------------------===== Loading address of application [Required] =====---------------------------------
# Description: Application loading address in RAM if not XiP, otherwise address of load in XiP.
outputImageExecutionAddress: 0
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified the default values are used.
trustZonePresetFile: my_tz_custom.yaml
# ----------------------------------------===== Image version. [Optional] =====-----------------------------------------
# Description: Image version is used for dual boot. The boot ROM decides which image to boot first based on the image
# version. It boots the one with the newer image version first, and in case of a failure, it boots the older one.
imageVersion: 0
MBI-A-I-LAO-TZ-EATZ#
MBI Mixins
Class name: plain_xip
MasterBootImage
Mbi_MixinApp
Mbi_MixinIvt
Mbi_MixinLoadAddressOptional
Mbi_MixinTrustZone
Mbi_ExportMixinAppTrustZone
MBI-A-I-LAO-TZ-EATZ JSON schema
MBI-A-I-LAO-TZ-EATZ YAML configuration template
# ============================================= YAML template plain_xip ==============================================
# ======================================================================================================================
# == MBI-A-I-LAO-TZ-EATZ ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# --------------------------------===== Loading address of application [Optional] =====---------------------------------
# Description: Application loading address in RAM if not XiP, otherwise address of load in XiP.
outputImageExecutionAddress: 0
# ------------------------------------===== TrustZone enable option [Optional] =====------------------------------------
# Description: If not specified, the Trust zone is disabled.
enableTrustZone: false
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified, but TrustZone is enabled(enableTrustZone) the default values are used.
trustZonePresetFile: my_tz_custom.yaml
MBI-A-I-TZ-LA-HK-EATZ#
MBI Mixins
Class name: plain_ram
MasterBootImage
Mbi_MixinApp
Mbi_MixinIvt
Mbi_MixinTrustZone
Mbi_MixinLoadAddress
Mbi_MixinHwKey
Mbi_ExportMixinAppTrustZone
MBI-A-I-TZ-LA-HK-EATZ JSON schema
MBI-A-I-TZ-LA-HK-EATZ YAML configuration template
# ============================================= YAML template plain_ram ==============================================
# ======================================================================================================================
# == MBI-A-I-TZ-LA-HK-EATZ ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, b0, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <signed-encrypted, crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# ------------------------------------===== TrustZone enable option [Optional] =====------------------------------------
# Description: If not specified, the Trust zone is disabled.
enableTrustZone: false
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified, but TrustZone is enabled(enableTrustZone) the default values are used.
trustZonePresetFile: my_tz_custom.yaml
# --------------------------------===== Loading address of application [Required] =====---------------------------------
# Description: Application loading address in RAM if not XiP, otherwise address of load in XiP.
outputImageExecutionAddress: 0
# ----------------------------------===== Enable User HW key sharing [Required] =====-----------------------------------
# Description: Controlling secure hardware key bus. If enabled(1), then it is possible to access keys on hardware secure
# bus from non-secure application, else non-secure application will read zeros.
enableHwUserModeKeys: false
MBI-A-RT-LA-I-TZ-CBV-HM-KS-HK-EATZCB-ERS-EHKSF#
MBI Mixins
Class name: signed_ram
MasterBootImage
Mbi_MixinApp
Mbi_MixinRelocTable
Mbi_MixinLoadAddress
Mbi_MixinIvt
Mbi_MixinTrustZone
Mbi_MixinCertBlockV1
Mbi_MixinHmacMandatory
Mbi_MixinKeyStore
Mbi_MixinHwKey
Mbi_ExportMixinAppTrustZoneCertBlock
Mbi_ExportMixinRsaSign
Mbi_ExportMixinHmacKeyStoreFinalize
MBI-A-RT-LA-I-TZ-CBV-HM-KS-HK-EATZCB-ERS-EHKSF JSON schema
MBI-A-RT-LA-I-TZ-CBV-HM-KS-HK-EATZCB-ERS-EHKSF YAML configuration template
# ============================================= YAML template signed_ram =============================================
# ======================================================================================================================
# == MBI-A-RT-LA-I-TZ-CBV-HM-KS-HK-EATZCB-ERS-EHKSF ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, b0, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <signed-encrypted, crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# --------------------------------===== The list of additional binaries [Optional] =====--------------------------------
# Description: This is software future of RTxxx family that NXP SDK startup code(not ROM) could load additional images.
applicationTable:
-
# ----------------------------------------===== Binary file [Required] =====----------------------------------------
# Description: The binary file to be added to final application.
binary: my_additional_binary.bin
# ------------------------------------===== Destination address [Required] =====------------------------------------
# Description: Destination address in RAM of additional binary.
destAddress: 536870912
# ----------------------------------------===== Enable load [Required] =====----------------------------------------
# Description: Enabler to load/use the image.
load: true
# --------------------------------===== Loading address of application [Required] =====---------------------------------
# Description: Application loading address in RAM if not XiP, otherwise address of load in XiP.
outputImageExecutionAddress: 0
# ------------------------------------===== TrustZone enable option [Optional] =====------------------------------------
# Description: If not specified, the Trust zone is disabled.
enableTrustZone: false
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified, but TrustZone is enabled(enableTrustZone) the default values are used.
trustZonePresetFile: my_tz_custom.yaml
# -----------------------------===== Certificate Block binary/config file [Required] =====------------------------------
# Description: Path to certificate block binary or config file.
certBlock: cert_block.yaml
# -------------------------------------===== Signer configuration [Required] =====--------------------------------------
# Description: Signature provider configuration in format 'type=<sp_type>;<key1>=<value1>;<key2>=<value2>' or path to a
# private key.
signer: type=file;file_path=root_prv_key.pem
# -----------------------------------===== OTP Master key (HMAC Key) [Required] =====-----------------------------------
# Description: The OTP Master key that is used to compute HMAC encryption key. Could be defined as hex number and also
# as hex/binary file.\n Used algorithm by tool the get HMAC Key; AES_ENCRYPT (OTP_MASTER_KEK,
# 0x00000000000000000000000000000000)
outputImageEncryptionKeyFile: otp_master_key.bin
# ------------------------------------===== The Key store data file [Optional] =====------------------------------------
# Description: Optional KeyStore data file for included keystore in LoadToRam images. If defined the KeyStore is added
# into MBI.
keyStoreFile: my_key_store_data.bin
# ----------------------------------===== Enable User HW key sharing [Required] =====-----------------------------------
# Description: Controlling secure hardware key bus. If enabled(1), then it is possible to access keys on hardware secure
# bus from non-secure application, else non-secure application will read zeros.
enableHwUserModeKeys: false
MBI-A-RT-LA-I-TZ-HK-EATZ-ECS#
MBI Mixins
Class name: crc_ram
MasterBootImage
Mbi_MixinApp
Mbi_MixinRelocTable
Mbi_MixinLoadAddress
Mbi_MixinIvt
Mbi_MixinTrustZone
Mbi_MixinHwKey
Mbi_ExportMixinAppTrustZone
Mbi_ExportMixinCrcSign
MBI-A-RT-LA-I-TZ-HK-EATZ-ECS JSON schema
MBI-A-RT-LA-I-TZ-HK-EATZ-ECS YAML configuration template
# ============================================== YAML template crc_ram ===============================================
# ======================================================================================================================
# == MBI-A-RT-LA-I-TZ-HK-EATZ-ECS ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, b0, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <signed-encrypted, crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# --------------------------------===== The list of additional binaries [Optional] =====--------------------------------
# Description: This is software future of RTxxx family that NXP SDK startup code(not ROM) could load additional images.
applicationTable:
-
# ----------------------------------------===== Binary file [Required] =====----------------------------------------
# Description: The binary file to be added to final application.
binary: my_additional_binary.bin
# ------------------------------------===== Destination address [Required] =====------------------------------------
# Description: Destination address in RAM of additional binary.
destAddress: 536870912
# ----------------------------------------===== Enable load [Required] =====----------------------------------------
# Description: Enabler to load/use the image.
load: true
# --------------------------------===== Loading address of application [Required] =====---------------------------------
# Description: Application loading address in RAM if not XiP, otherwise address of load in XiP.
outputImageExecutionAddress: 0
# ------------------------------------===== TrustZone enable option [Optional] =====------------------------------------
# Description: If not specified, the Trust zone is disabled.
enableTrustZone: false
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified, but TrustZone is enabled(enableTrustZone) the default values are used.
trustZonePresetFile: my_tz_custom.yaml
# ----------------------------------===== Enable User HW key sharing [Required] =====-----------------------------------
# Description: Controlling secure hardware key bus. If enabled(1), then it is possible to access keys on hardware secure
# bus from non-secure application, else non-secure application will read zeros.
enableHwUserModeKeys: false
MBI-A-RT-LA-I-TZ-CBV-HK-KS-HM-CIV-EATZCBE-ERS-EHKSF#
MBI Mixins
Class name: encrypted_signed_ram
MasterBootImage
Mbi_MixinApp
Mbi_MixinRelocTable
Mbi_MixinLoadAddress
Mbi_MixinIvt
Mbi_MixinTrustZone
Mbi_MixinCertBlockV1
Mbi_MixinHwKey
Mbi_MixinKeyStore
Mbi_MixinHmacMandatory
Mbi_MixinCtrInitVector
Mbi_ExportMixinAppTrustZoneCertBlockEncrypt
Mbi_ExportMixinRsaSign
Mbi_ExportMixinHmacKeyStoreFinalize
MBI-A-RT-LA-I-TZ-CBV-HK-KS-HM-CIV-EATZCBE-ERS-EHKSF JSON schema
MBI-A-RT-LA-I-TZ-CBV-HK-KS-HM-CIV-EATZCBE-ERS-EHKSF YAML configuration template
# ======================================== YAML template encrypted_signed_ram ========================================
# ======================================================================================================================
# == MBI-A-RT-LA-I-TZ-CBV-HK-KS-HM-CIV-EATZCBE-ERS-EHKSF ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, b0, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <signed-encrypted, crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# --------------------------------===== The list of additional binaries [Optional] =====--------------------------------
# Description: This is software future of RTxxx family that NXP SDK startup code(not ROM) could load additional images.
applicationTable:
-
# ----------------------------------------===== Binary file [Required] =====----------------------------------------
# Description: The binary file to be added to final application.
binary: my_additional_binary.bin
# ------------------------------------===== Destination address [Required] =====------------------------------------
# Description: Destination address in RAM of additional binary.
destAddress: 536870912
# ----------------------------------------===== Enable load [Required] =====----------------------------------------
# Description: Enabler to load/use the image.
load: true
# --------------------------------===== Loading address of application [Required] =====---------------------------------
# Description: Application loading address in RAM if not XiP, otherwise address of load in XiP.
outputImageExecutionAddress: 0
# ------------------------------------===== TrustZone enable option [Optional] =====------------------------------------
# Description: If not specified, the Trust zone is disabled.
enableTrustZone: false
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified, but TrustZone is enabled(enableTrustZone) the default values are used.
trustZonePresetFile: my_tz_custom.yaml
# -----------------------------===== Certificate Block binary/config file [Required] =====------------------------------
# Description: Path to certificate block binary or config file.
certBlock: cert_block.yaml
# -------------------------------------===== Signer configuration [Required] =====--------------------------------------
# Description: Signature provider configuration in format 'type=<sp_type>;<key1>=<value1>;<key2>=<value2>' or path to a
# private key.
signer: type=file;file_path=root_prv_key.pem
# ----------------------------------===== Enable User HW key sharing [Required] =====-----------------------------------
# Description: Controlling secure hardware key bus. If enabled(1), then it is possible to access keys on hardware secure
# bus from non-secure application, else non-secure application will read zeros.
enableHwUserModeKeys: false
# ------------------------------------===== The Key store data file [Optional] =====------------------------------------
# Description: Optional KeyStore data file for included keystore in LoadToRam images. If defined the KeyStore is added
# into MBI.
keyStoreFile: my_key_store_data.bin
# -----------------------------------===== OTP Master key (HMAC Key) [Required] =====-----------------------------------
# Description: The OTP Master key that is used to compute HMAC encryption key. Could be defined as hex number and also
# as hex/binary file.\n Used algorithm by tool the get HMAC Key; AES_ENCRYPT (OTP_MASTER_KEK,
# 0x00000000000000000000000000000000)
outputImageEncryptionKeyFile: otp_master_key.bin
# ---------------===== The output image encryption initial vector for encryption counter [Optional] =====---------------
# Description: The initial vector for encryption counter. Could be defined as hex number and also as hex/binary file
CtrInitVector: '0xc3df2316fd40b15586cb5ae49483aee2'
MBI-A-IZTL-LAO-TZ-HK-EATZ#
MBI Mixins
Class name: plain_xip
MasterBootImage
Mbi_MixinApp
Mbi_MixinIvtZeroTotalLength
Mbi_MixinLoadAddressOptional
Mbi_MixinTrustZone
Mbi_MixinHwKey
Mbi_ExportMixinAppTrustZone
MBI-A-IZTL-LAO-TZ-HK-EATZ JSON schema
MBI-A-IZTL-LAO-TZ-HK-EATZ YAML configuration template
# ============================================= YAML template plain_xip ==============================================
# ======================================================================================================================
# == MBI-A-IZTL-LAO-TZ-HK-EATZ ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, b0, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <signed-encrypted, crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# --------------------------------===== Loading address of application [Optional] =====---------------------------------
# Description: Application loading address in RAM if not XiP, otherwise address of load in XiP.
outputImageExecutionAddress: 0
# ------------------------------------===== TrustZone enable option [Optional] =====------------------------------------
# Description: If not specified, the Trust zone is disabled.
enableTrustZone: false
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified, but TrustZone is enabled(enableTrustZone) the default values are used.
trustZonePresetFile: my_tz_custom.yaml
# ----------------------------------===== Enable User HW key sharing [Required] =====-----------------------------------
# Description: Controlling secure hardware key bus. If enabled(1), then it is possible to access keys on hardware secure
# bus from non-secure application, else non-secure application will read zeros.
enableHwUserModeKeys: false
MBI-A-I-TZM-LAO-IV-EATZ#
MBI Mixins
Class name: plain_xip
MasterBootImage
Mbi_MixinApp
Mbi_MixinIvt
Mbi_MixinTrustZoneMandatory
Mbi_MixinLoadAddressOptional
Mbi_MixinImageVersion
Mbi_ExportMixinAppTrustZone
MBI-A-I-TZM-LAO-IV-EATZ JSON schema
MBI-A-I-TZM-LAO-IV-EATZ YAML configuration template
# ============================================= YAML template plain_xip ==============================================
# ======================================================================================================================
# == MBI-A-I-TZM-LAO-IV-EATZ ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, a1, b0, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified the default values are used.
trustZonePresetFile: my_tz_custom.yaml
# --------------------------------===== Loading address of application [Optional] =====---------------------------------
# Description: Application loading address in RAM if not XiP, otherwise address of load in XiP.
outputImageExecutionAddress: 0
# ----------------------------------------===== Image version. [Optional] =====-----------------------------------------
# Description: Image version is used for dual boot. The boot ROM decides which image to boot first based on the image
# version. It boots the one with the newer image version first, and in case of a failure, it boots the older one.
imageVersion: 0
MBI-A-RT-I-TZM-LA-IV-EATZ-ECS#
MBI Mixins
Class name: crc_ram
MasterBootImage
Mbi_MixinApp
Mbi_MixinRelocTable
Mbi_MixinIvt
Mbi_MixinTrustZoneMandatory
Mbi_MixinLoadAddress
Mbi_MixinImageVersion
Mbi_ExportMixinAppTrustZone
Mbi_ExportMixinCrcSign
MBI-A-RT-I-TZM-LA-IV-EATZ-ECS JSON schema
MBI-A-RT-I-TZM-LA-IV-EATZ-ECS YAML configuration template
# ============================================== YAML template crc_ram ===============================================
# ======================================================================================================================
# == MBI-A-RT-I-TZM-LA-IV-EATZ-ECS ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, a1, b0, latest>
revision: a0
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# --------------------------------===== The list of additional binaries [Optional] =====--------------------------------
# Description: This is software future of RTxxx family that NXP SDK startup code(not ROM) could load additional images.
applicationTable:
-
# ----------------------------------------===== Binary file [Required] =====----------------------------------------
# Description: The binary file to be added to final application.
binary: my_additional_binary.bin
# ------------------------------------===== Destination address [Required] =====------------------------------------
# Description: Destination address in RAM of additional binary.
destAddress: 536870912
# ----------------------------------------===== Enable load [Required] =====----------------------------------------
# Description: Enabler to load/use the image.
load: true
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified the default values are used.
trustZonePresetFile: my_tz_custom.yaml
# --------------------------------===== Loading address of application [Required] =====---------------------------------
# Description: Application loading address in RAM if not XiP, otherwise address of load in XiP.
outputImageExecutionAddress: 0
# ----------------------------------------===== Image version. [Optional] =====-----------------------------------------
# Description: Image version is used for dual boot. The boot ROM decides which image to boot first based on the image
# version. It boots the one with the newer image version first, and in case of a failure, it boots the older one.
imageVersion: 0
MBI-A-I-LA-CBV-MD-IST-IV-FV-EACBM-EES#
MBI Mixins
Class name: signed_xip
MasterBootImage
Mbi_MixinApp
Mbi_MixinIvt
Mbi_MixinLoadAddress
Mbi_MixinCertBlockV21
Mbi_MixinManifestDigest
Mbi_MixinImageSubType
Mbi_MixinImageVersion
Mbi_MixinFwVersion
Mbi_ExportMixinAppCertBlockManifest
Mbi_ExportMixinEccSign
MBI-A-I-LA-CBV-MD-IST-IV-FV-EACBM-EES JSON schema
MBI-A-I-LA-CBV-MD-IST-IV-FV-EACBM-EES YAML configuration template
# ============================================= YAML template signed_xip =============================================
# ======================================================================================================================
# == MBI-A-I-LA-CBV-MD-IST-IV-FV-EACBM-EES ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a0, a1, b0, latest>
revision: a1
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# --------------------------------===== Loading address of application [Required] =====---------------------------------
# Description: Application loading address in RAM if not XiP, otherwise address of load in XiP.
outputImageExecutionAddress: 0
# -----------------------------===== Certificate Block binary/config file [Required] =====------------------------------
# Description: Path to certificate block binary or config file.
certBlock: cert_block.yaml
# -------------------------------------===== Signer configuration [Required] =====--------------------------------------
# Description: Signature provider configuration in format 'type=<sp_type>;<key1>=<value1>;<key2>=<value2>' or path to a
# private key.
signer: type=file;file_path=root_prv_key.pem
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified the default values are used.
trustZonePresetFile: my_tz_custom.yaml
# ---------------------------------------===== Firmware version. [Optional] =====---------------------------------------
# Description: Value compared with Secure_FW_Version monotonic counter value stored in protected memory (MCU specific).
# If value is lower than value in protected memory, then is image rejected (rollback protection).
firmwareVersion: 0
# -----------------------------------------===== Image SubType [Optional] =====-----------------------------------------
# Description: Image subtype determine the image use in MCU. "main" for main application, "nbu" for Narrow Band Unit
# image and "recovery" for recovery image type
# Possible options: <main, nbu, recovery>
outputImageSubtype: main
# ----------------------------------------===== Image version. [Optional] =====-----------------------------------------
# Description: Image version is used for dual boot. The boot ROM decides which image to boot first based on the image
# version. It boots the one with the newer image version first, and in case of a failure, it boots the older one.
imageVersion: 0
MBI-A-I-CBV-M-LA-FV-IV-EACBM-EES#
MBI Mixins
Class name: signed_ram
MasterBootImage
Mbi_MixinApp
Mbi_MixinIvt
Mbi_MixinCertBlockV21
Mbi_MixinManifest
Mbi_MixinLoadAddress
Mbi_MixinFwVersion
Mbi_MixinImageVersion
Mbi_ExportMixinAppCertBlockManifest
Mbi_ExportMixinEccSign
MBI-A-I-CBV-M-LA-FV-IV-EACBM-EES JSON schema
MBI-A-I-CBV-M-LA-FV-IV-EACBM-EES YAML configuration template
# ============================================= YAML template signed_ram =============================================
# ======================================================================================================================
# == MBI-A-I-CBV-M-LA-FV-IV-EACBM-EES ==
# ======================================================================================================================
# -------------------------------------===== The chip family name [Required] =====--------------------------------------
# Description: NXP chip family identifier.
family: CHOOSE_FROM_TABLE
# -----------------------------------------===== MCU revision [Optional] =====------------------------------------------
# Description: Revision of silicon. The 'latest' name, means most current revision.
# Possible options: <a1, a2, latest>
revision: a1
# --------------------------------------===== Application target [Required] =====---------------------------------------
# Description: Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.
# Possible options: <xip, load-to-ram>
outputImageExecutionTarget: CHOOSE_FROM_TABLE
# -------------------------------===== Type of boot image authentication [Required] =====-------------------------------
# Description: Specification of final master boot image authentication.
# Possible options: <crc, signed, plain>
outputImageAuthenticationType: CHOOSE_FROM_TABLE
# ---------------------------------------===== Output Image name [Required] =====---------------------------------------
# Description: The path for result binary file.
masterBootOutputFile: my_mbi.bin
# ------------------------------------===== Plain application image [Required] =====------------------------------------
# Description: The input application image to by modified to Master Boot Image.
inputImageFile: my_application.bin
# -----------------------------===== Certificate Block binary/config file [Required] =====------------------------------
# Description: Path to certificate block binary or config file.
certBlock: cert_block.yaml
# -------------------------------------===== Signer configuration [Required] =====--------------------------------------
# Description: Signature provider configuration in format 'type=<sp_type>;<key1>=<value1>;<key2>=<value2>' or path to a
# private key.
signer: type=file;file_path=root_prv_key.pem
# ---------------------------------===== TrustZone Customization file [Optional] =====----------------------------------
# Description: If not specified the default values are used.
trustZonePresetFile: my_tz_custom.yaml
# ---------------------------------------===== Firmware version. [Optional] =====---------------------------------------
# Description: Value compared with Secure_FW_Version monotonic counter value stored in protected memory (MCU specific).
# If value is lower than value in protected memory, then is image rejected (rollback protection).
firmwareVersion: 0
# --------------------------------===== Loading address of application [Required] =====---------------------------------
# Description: Application loading address in RAM if not XiP, otherwise address of load in XiP.
outputImageExecutionAddress: 0
# ----------------------------------------===== Image version. [Optional] =====-----------------------------------------
# Description: Image version is used for dual boot. The boot ROM decides which image to boot first based on the image
# version. It boots the one with the newer image version first, and in case of a failure, it boots the older one.
imageVersion: 0