STMicroelectronics STM32HSM-V1 Hardware Security Module

STMicroelectronics STM32HSM-V1 Hardware Security Module (HSM) is used to secure the programming of STM32 products. The STM32HSM-V1 HSM prevents product counterfeiting at contract manufacturers' premises. The SFI feature enables secure loading of customer firmware to STM32 products, embedding a secure bootloader.  

The original equipment manufacturer (OEM) defines the firmware encryption key and encrypts the firmware, then stores the encryption key to one or more STM32HSM-V1 HSMs and sets the number of authorized SFI operations (counter value) using the STM32CubeProgrammer and STM32 Trusted Package Creator software tools. Contract manufacturers must utilize the STM32HSM-V1 HSMs to load encrypted firmware to STM32 devices. Each HSM only allows the OEM-defined number of programming operations before being irreversibly deactivated.

 

Features

  • Genuine firmware identification (firmware identifier)
  • Identification of STM32 products with secure firmware install (SFI) functionality
  • Management of ST public keys associated with the supported STM32 products
  • Secure counter that generates a predefined number of licenses
  • License generation using a customer-defined firmware encryption key
  • Direct support for the STM32CubeProgrammer software (STM32CubeProg) including the STM32 Trusted Package Creator tool
Pubblicato: 2019-10-23 | Aggiornato: 2024-02-21