Arrow Development ToolsIMX_8X-SSK | Security Starter Kit with NXP i.MX 8X and Infineon OPTIGA™ TPM 2.0Sistema integrato, schede e kit di sviluppo

Arrow has worked closely with several technology suppliers to create a solution that employ’s ten major security features and take the guesswork out of implementation and reducing your overall time to market. The Arrow Security Starter Kit integrates Yocto Linux open-source software framework, with a readily available Arrow 96boards single-board computer (SBC) based on the NXP i.MX 8X MPU, Infineon’s OPTIGA™ TPM 2.0 secure solution and AWS IoT Greengrass. AWS IoT Greengrass is software that lets you run local compute, messaging & data caching for connected IoT devices in a secure way. Using this kit, device makers can easily add security to their end products while adhering to the latest security standards, including ETSI TS 103 645, NISTIR 8259A, and ISO 27001.

Security Starter Kit with i.MX 8X and OPTIGA™ TPM 2.0

This combination includes the Arrow 96boards SBC, based on the NXP i.MX 8X MPU and supports WiFi IEEE 802.11 a/b/g/n/ac and Bluetooth 4.2 connectivity. The Tresor Mezzanine Board adds advanced security features to the 96Boards SBCs and includes the OPTIGA™ SLB9670x or SLM9670x TPM 2.0 that supports the following features:

• •  Compliant to TPM Main Specification, Family “2.0”
• •  Hardware and firmware are validated according to FIPS 140-2 Level 2
• •  Random Number Generator (RNG) according to NIST SP800-90A
• •  Full personalization with Endorsement Key (EK) and EK certificate
• •  24 PCRs (SHA-1 or SHA-256)

 

Security Feature Implemented	Description
Unique Device Identifier	EUI64 is used and stored in the OPTIGA™ TPM 2.0
Secure Boot	Software based secure boot feature performed with OPTIGA™ TPM 2.0
Secure OTA Updates	Implemented software-based capability for OTA updates with OPTIGA™ TPM 2.0
Secure Data (encryption)	Data encrypted and decrypted using keys stored in the OPTIGA™ TPM 2.0
Device Authentication	Device authentication feature enabled in the OPTIGA™ TPM 2.0
Device Management (Allow/Deny)	Performed in AWS Cloud Services
Isolation of secure firmware from non-secure application	Stored in the OPTIGA™ TPM 2.0
Isolation of credentials (keys) in a Tamper-resistant element	Stored in the OPTIGA™ TPM 2.0
X.509 certificate support	A digital certificate to verify that a public key belongs to the Hostname/domain or organization and stored in the OPTIGA™ TPM 2.0
Secure Supply Chain	Register Root CA in AWS and using Root CA to create the device certificate. An Intermediate CA is not employed. Private key and device certificate are stored in the OPTIGA™ TPM 2.0

 

More Resources

i.MX8 8X_SSK Product Brief
i.MX8 8X_SSK Quick Start Guide
i.MX8 8X_SSK Developer’s Guide
SSK Cloud Connect Quick Start Guide
SSK Cloud Connect User's Guide
Arrow Electronics Github site for Source Code and SSK tar archive