MBI-A-I-CBV-MD-LA-FV-IV-EACBM-EES




Type: object

The following properties are required:

  • mainRootCertPrivateKeyFile
Type: object

The following properties are required:

  • signPrivateKey

Must not be:

Type: object

The following properties are required:

  • signProvider

Type: object

The following properties are required:

  • signProvider

Must not be:


Type: object

The following properties are required:

  • mainRootCertPrivateKeyFile
Type: object

The following properties are required:

  • signPrivateKey

MCU family

Type: string

MCU family name.

Application target

Type: enum (of string)

Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.

Must be one of:

  • "xip"
  • "load-to-ram"
  • "Internal flash (XIP)"
  • "External flash (XIP)"
  • "Internal Flash (XIP)"
  • "External Flash (XIP)"
  • "RAM"
  • "ram"

Type of boot image authentication

Type: enum (of string)

Specification of final master boot image authentication.

Must be one of:

  • "plain"
  • "crc"
  • "signed"
  • "signed-encrypted"
  • "signed-nxp"
  • "Plain"
  • "CRC"
  • "Signed"
  • "Encrypted + Signed"
  • "NXP Signed"
  • "NXP signed"
  • "encrypted"

Output Image name

Type: stringFormat: file_name

The path for result binary file.

Plain application image

Type: stringFormat: file

The input application image to by modified to Master Boot Image.

Certificate Block binary/config file

Type: stringFormat: file

Path to certificate block binary or config file.

Main Certificate private key

Type: stringFormat: file

Main Certificate private key used to sign certificate. It can be replaced by signProvider key.

Main Certificate private key

Type: stringFormat: file

Main Certificate private key used to sign certificate. It can be replaced by signProvider key.

Signature Provider

Type: string

Signature provider configuration in format 'type=<sp_type>;<key1>=<value1>;<key2>=<value2>'.

TrustZone enable option

Type: boolean

If not specified, the Trust zone is disabled.

TrustZone Customization file

Type: stringFormat: optional_file

If not specified, but TrustZone is enabled(enableTrustZone) the default values are used.

Firmware version.

Type: number or stringFormat: number

Value compared with SecureFWVersion monotonic counter value stored in protected memory (MCU specific). If value is lower than value in protected memory, then is image rejected (rollback protection).

Manifest signing hash algorithm

Type: enum (of string)

Optional Manifest signing hash algorithm name to create Certificate v3.1 Manifest.

Must be one of:

  • "sha256"
  • "sha384"
  • "sha512"

Loading address of application

Type: number or string

Application loading address in RAM if not XiP, otherwise address of load in XiP.

Image version.

Type: number or stringFormat: number

Image version is used for dual boot. The boot ROM decides which image to boot first based on the image version. It boots the one with the newer image version first, and in case of a failure, it boots the older one.