Arrow Development ToolsSTM32WB55-SSK | Security Starter Kit with STM32WB55 and Infineon OPTIGA™ Trust MCartes et kits de développement RF/sans fil

Arrow has worked closely with several technology suppliers to create a solution that employ’s ten major security features and take the guesswork out of implementation and reducing your overall time to market. The Arrow Security Starter Kit integrates the FreeRTOS open-source software framework, with readily available BLE based evaluation kit from ST Micro, Infineon’s OPTIGA™ Trust M secure solution and AWS IoT Core. AWS IoT Core is a service that enables you to connect devices to AWS, while providing secure data, interactions, process and act upon the device data. Using this kit, device makers can easily add security to their end products while adhering to the latest security standards, including ETSI TS 103 645, NISTIR 8259A, and ISO 27001.

Security Starter Kit with ST Micro STM32WB55 and OPTIGA™ Trust M

This combination includes a Trust M S2GO board (Shield2Go) and the ST Micro P-Nucleo-WB55 EVK. The STM32WB55 EVK supports BLE and Bluetooth® 5 connectivity. The Trust M S2GO Board has one OPTIGA™ Trust M security chip on an easy-to-handle PCB. It provides a root of trust in the form of a unique X.509 certificate coupled with hardware support to establish a MQTT and TLS (Transport Layer Security) connection between devices and cloud, forming a robust basis for secured communication. Arrow also provides iOS and Android mobile apps, which are used for provisioning, authentication and communication between the Security Starter Kit and the Cloud.

Security Feature Implemented	Description
Unique Device Identifier	EUI64 is used and stored in the OPTIGA™ Trust M
Secure Boot	Software based secure boot feature performed with OPTIGA™ Trust M
Secure OTA Updates	Implemented software-based capability for OTA updates with OPTIGA™ Trust M
Secure Data (encryption)	Data encrypted and decrypted using keys stored in the OPTIGA™ Trust M
Device Authentication	Device authentication feature enabled in the OPTIGA™ Trust M
Device Management (Allow/Deny)	Performed in AWS Cloud Services
Isolation of secure firmware from non-secure application	Stored in the OPTIGA™ Trust M
Isolation of credentials (keys) in a Tamper-resistant element	Stored in the OPTIGA™ Trust M
X.509 certificate support	A digital certificate to verify that a public key belongs to the Hostname/domain or organization and stored in the OPTIGA™ Trust M
Secure Supply Chain	Register Root CA in AWS and using Root CA to create the device certificate. An Intermediate CA is not employed. Private key and device certificate are stored in the OPTIGA™ Trust M

More Resources

STM32WB55-SSK Product Brief
STM32WB55-SSK Quick Start Guide
STM32WB55-SSK Developer’s Guide
SSK Cloud Connect Quick Start Guide
SSK Cloud Connect User's Guide
Arrow Electronics Github site for Source Code and SSK tar archive