Provisioning The CEC1736 Quick Start Guide

INTRODUCTION

The purpose of this guide is to provide instructions on how to provision the CEC1736. There are two ways to access the instructions to provision the CEC1736: using the web URL and using the TPDS application. Each will be described in this document.

Using the Web URL

The following URL details complete instructions on how to provision the CEC1736:

https://www.microchip.com/en-us/products/security/secure-boot-solutions/cec1736-configurator

Using the TPDS Application

Step 1

To provision the TPDS using the TPDS application, use the following URL to install the application:

https://microchipdeveloper.com/authentication:trust-platform-v2

Step 2

Launch the TPDS application from the Start menu.

A visual representation shows the Trust Platform Design Suite application with options for 'New' and 'TPDS Command Prompt'.

Step 3

On the top, select the Configurators tab.

A screenshot of the Trust Platform Design Suite interface is displayed, highlighting the 'Configurators' tab. Below this, there are three options presented with logos: 'TRUST &GO', 'TRUST FLEX', and 'TRUST CUSTOM'. Each option has a brief description:

• TRUST &GO: Pre-configured and pre-provisioned Secure Elements for fix-function Use Cases. Trust&GO allows to secure connectivity to any cloud infrastructure either IP-based or
• TRUST FLEX: Pre-configured & provisioned Secure Element with customer unique credentials. TrustFLEX enables most common authentication Uses Cases across various markets.
• TRUST CUSTOM: Fully customizable Secure Element including configuration and provisioning with customer unique credentials. TrustCUSTOM allows to address the most demanding security use cases.

Step 4

Scroll down to the bottom and select CEC1736.

A screenshot of the Trust Platform Design Suite's 'Configurators' section shows a list of available configurations. The options include 'ATECC608B-TCSM', 'CEC1736', and 'TA100'. The 'CEC1736' option is highlighted, with a sub-option 'CEC1736 Configurator' available.

CEC173x Configurator

This should open a web page with instructions on how to configure the CEC1736.

The CEC173x Configurator can be used to develop with the security features available on the CEC173x Trust Shield family of Root of Trust controllers. This easy-to-use tool is designed to be used in conjunction with the CEC1736 Development Board (EV19K07A), which provides a high level of customization. Features include:

• Hardware CNSA secure boot/secure updates
• Real-time SPI bus monitoring, I2C/SMBus filtering
• 384-bit Physically Unclonable Function (PUF)
• Device and firmware attestation
• Side-channel attack countermeasures
• Lifecycle management and ownership transfer
• Advanced hardware crypto cipher suite

Download Now

Note: After downloading the configurator package, unzip the file, navigate to "sw_CEC173x-TCSM," then "assets," and run the HTML file named "CEC173x configurator" in a browser. This will open a resource page from which the configurator can be run.

Press ‘Download Now'. Once complete, unzip the contents into a folder. Open .\CEC173xConfigurator\sw_CEC173x-TCSM\assets\CEC173x configurator.html and the instructions for provisioning the CEC1736 will be displayed.

CEC173x Support Collaterals

Please contact your local Microchip sales representative to access related design documents and software tools. A Non-Disclosure Agreement is needed.

Click on table rows for more info:

• Documentation Published on Microchip Website
• Hardware Interfaces
• Software Interfaces
• Development Tools
• Utilities

Provisioning the CEC173x

A diagram illustrates the provisioning process, showing inputs such as 'AP Pub Key Hash Blob', 'ECDSA Hash Blob', and 'Config file' being processed.