EmSPARK^TM is preconfigured to use NXP’s Trust Architecture available in the Layerscape and i.MX processors. EmSPARKTM Security Suite:

• Streamlines secure boot implementation providing integrity and confidentiality for the entire boot chain from bootloader to TEE to Linux kernel
• Hardware enforced domain isolation (Arm® TrustZone®) for security related tasks, keystore and certificate management and Trusted execution of critical processes

EmSPARK^TM abstracts away security complexity via Linux APIs for pre-built, TrustZone secured security functions including:

• Firmware update
• Secure storage
• Key store and certificate management
• Cryptographic operations

Provisioning devices during manufacturing without compromising customer secrets (keys and certificates) is big challenge. Without the right tools and processes, OEMs risk losing control over their intellectual property and incur loss of revenue through piracy. EmSPARK^TM provides tools and processes for firmware preparation making it possible for OEMs to manufacture devices in untrusted facilities without risking theft of firmware or unauthorized manufacturing of devices. SecEdge works closely with companies and their ODMs/OEMs to ensure secure device provisioning within existing manufacturing workflows.