MBI-A-RT-LA-I-TZ-CBV-HM-KS-HK-EATZCB-ERS-EHKSF




Type: object

The following properties are required:

  • mainRootCertPrivateKeyFile
Type: object

The following properties are required:

  • signPrivateKey

Must not be:

Type: object

The following properties are required:

  • signProvider

Type: object

The following properties are required:

  • signProvider

Must not be:


Type: object

The following properties are required:

  • mainRootCertPrivateKeyFile
Type: object

The following properties are required:

  • signPrivateKey

MCU family

Type: string

MCU family name.

Application target

Type: enum (of string)

Definition if application is Execute in Place(XiP) or loaded to RAM during reset sequence.

Must be one of:

  • "xip"
  • "load-to-ram"
  • "Internal flash (XIP)"
  • "External flash (XIP)"
  • "Internal Flash (XIP)"
  • "External Flash (XIP)"
  • "RAM"
  • "ram"

Type of boot image authentication

Type: enum (of string)

Specification of final master boot image authentication.

Must be one of:

  • "plain"
  • "crc"
  • "signed"
  • "signed-encrypted"
  • "signed-nxp"
  • "Plain"
  • "CRC"
  • "Signed"
  • "Encrypted + Signed"
  • "NXP Signed"
  • "NXP signed"
  • "encrypted"

Output Image name

Type: stringFormat: file_name

The path for result binary file.

Plain application image

Type: stringFormat: file

The input application image to by modified to Master Boot Image.

The list of additional binaries

Type: array of object

This is software future of RTxxx family that NXP SDK startup code(not ROM) could load additional images.

No Additional Items

Each item of this array must be:

Type: object

Binary file

Type: stringFormat: file

The binary file to be added to final application.

Destination address

Type: string or numberFormat: number

Destination address in RAM of additional binary.

Enable load

Type: boolean

Enabler to load/use the image.

Loading address of application

Type: number or string

Application loading address in RAM if not XiP, otherwise address of load in XiP.

TrustZone enable option

Type: boolean

If not specified, the Trust zone is disabled.

TrustZone Customization file

Type: stringFormat: optional_file

If not specified, but TrustZone is enabled(enableTrustZone) the default values are used.

Certificate Block binary/config file

Type: stringFormat: file

Path to certificate block binary or config file.

Main Certificate private key

Type: stringFormat: file

Main Certificate private key used to sign certificate. It can be replaced by signProvider key.

Main Certificate private key

Type: stringFormat: file

Main Certificate private key used to sign certificate. It can be replaced by signProvider key.

Signature Provider

Type: string

Signature provider configuration in format 'type=<sp_type>;<key1>=<value1>;<key2>=<value2>'.

OTP Master key (HMAC Key)

Type: string

The OTP Master key that is used to compute HMAC encryption key. Could be defined as hex number and also as hex/binary file.\n Used algorithm by tool the get HMAC Key; AESENCRYPT (OTPMASTER_KEK, 0x00000000000000000000000000000000)

The Key store data file

Type: stringFormat: optional_file

Optional KeyStore data file for included keystore in LoadToRam images. If defined the KeyStore is added into MBI.

Enable User HW key sharing

Type: boolean or string

Controlling secure hardware key bus. If enabled(1), then it is possible to access keys on hardware secure bus from non-secure application, else non-secure application will read zeros.