STM32 Trusted Package Creator is part of the STM32CubeProgrammer tool set (STM32CubeProg), and allows the generation of secure firmware and modules to be used for STM32 secure programming solutions
1. Trusted package creator Overview[edit | edit source]
STM32 Trusted Package Creator is part of the STM32CubeProgrammer tool set (STM32CubeProg), and allows the generation of secure firmware and modules to be used for STM32 secure programming solutions, which are listed below:
- Secure secret provisioning (SSP) for STM32 MPUs. SSP allows OEM secrets to be programmed into the STM32 one time programming (OTP) area in a secure way (with confidentiality, authentication and integrity checks).
2. Install STM32 trusted package creator tool[edit | edit source]
To install the STM32 trusted package creator tool, you need to install the STM32CubeProgrammer.
To run it, you will need to launch the STM32TrustedPackageCreator_CLI for command line mode or STM32TrustedPackageCreator executable file to start the graphical user interface .
3. How to use trusted package creator tool[edit | edit source]
For STM32MP1 and STM32MP2, the SSP programming scenario is described in document AN5054:
- section 14 : Example of SSP programming scenario for STM32MP1 covers STM32MP1,
- section 15 : Example of SSP-SFI programming scenario for STM32MP2 covers STM32MP2.
These sections present the complete step-by-step process to generate and install the Secure Secret Provisioning package, including environment preparation, secret file creation, SSP generation in GUI mode, STM32HSM programming for license generation, programming conditions, and installation using STM32CubeProgrammer.
Refer to detailed user manual, UM2238.