MBI-A-BT-B-F-CBV-EABF-EESV




Type: object

The following properties are required:

  • mainRootCertPrivateKeyFile
Type: object

The following properties are required:

  • signPrivateKey

Must not be:

Type: object

The following properties are required:

  • signProvider

Type: object

The following properties are required:

  • signProvider

Must not be:


Type: object

The following properties are required:

  • mainRootCertPrivateKeyFile
Type: object

The following properties are required:

  • signPrivateKey

MCU family

Type: string

MCU family name.

Application target

Type: enum (of string)

Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.

Must be one of:

  • "xip"
  • "load-to-ram"
  • "Internal flash (XIP)"
  • "External flash (XIP)"
  • "Internal Flash (XIP)"
  • "External Flash (XIP)"
  • "RAM"
  • "ram"

Type of boot image authentication

Type: enum (of string)

Specification of final master boot image authentication.

Must be one of:

  • "plain"
  • "crc"
  • "signed"
  • "signed-encrypted"
  • "signed-nxp"
  • "Plain"
  • "CRC"
  • "Signed"
  • "Encrypted + Signed"
  • "NXP Signed"
  • "NXP signed"
  • "encrypted"

Output Image name

Type: stringFormat: file_name

The path for result binary file.

Plain application image

Type: stringFormat: file

The input application image to by modified to Master Boot Image.

Firmware version.

Type: number or stringFormat: number

Used for anti-rollback protection. New firmware must have the same or higher FW version. This value is the minimum firmware version will be stored in BCA and the firmware version specified in SBX file is then compared with this value.

Life cycle state

Type: enum (of string)

life cycle state model to protect code from reading from the device internal flash, which is called code read protection feature. There are different levels of protections in the system, so that access to the on-chip flash and use of ISP can be restricted. Four levels of Read Out Protection (ROP) are supported. This read out protection is a mechanism that allows user to enable different levels of protection in the system. It is a 8-bit field FTFA_FSEC associated with flash security byte (0x40c byte address). It can be programmed by customer. Check the SRM for more information. If not provided, value in application will be used.

Must be one of:

  • "NOT_SET"
  • "OEM_OPEN"
  • "OEM_CLOSED_ROP1"
  • "OEM_CLOSED_ROP2"
  • "OEM_CLOSED_ROP3"
  • "OEM_CLOSED_NO_RETURN"

Certificate Block binary file

Type: stringFormat: file

Path to certificate block.

True to append SHA256 hash [0:127] at the end of certificate block

Type: boolean

Not mandatory if the hash is written in OTP

Main Certificate private key

Type: stringFormat: file

Main Certificate private key used to sign certificate. It can be replaced by signProvider key.

Main Certificate private key

Type: stringFormat: file

Main Certificate private key used to sign certificate. It can be replaced by signProvider key.

Signature Provider

Type: string

Signature provider configuration in format 'type=<sp_type>;<key1>=<value1>;<key2>=<value2>'.