Overview

Description

Topics
  • New release: Security Key Management Tool V.1.03
    • Plug-in version of e² studio is released.
    • RA SCE9 Compatibility Mode and RA SCE5_B are supported.
    • RSA 3072/4096bit are added to RX TSIP supported key algorithm.

The Security Key Management Tool is a key-wrapping tool for use with key-management systems that use security IP modules incorporated in Renesas MCUs and MPUs. This tool is provided to assist in the secure installation and updating of user-application keys and device lifecycle management (DLM) keys.

Features

  • Compliant with key-management systems that use security IP modules incorporated in Renesas MCUs and MPUs
  • Wrapping of user application keys and DLM keys for secure key installation and secure key updating
  • Key data files can be output in a variety of file formats
  • See details for functions

Release Information

Release Information

Supported Device Family Security IP
RA SCE9 (Protected Mode, Compatibility Mode), SCE7, SCE5, SCE5_B
RE TSIP-Lite
RX TSIP, TSIP-Lite
RZ TSIP
Synergy SCE7, SCE5

Target Devices

Other Target Families*

  • RE Family
  • RZ Family
  • *Contact Technical Support or Sales for details of these target devices. Contact Us

Downloads

Title Type Date
ZIP17.84 MB日本語
Software & Tools - Other
ZIP17.94 MB日本語
Software & Tools - Other
ZIP166.89 MB日本語
Software & Tools - Other
ZIP154.37 MB日本語
Software & Tools - Other

Documentation

Title Type Date
Manual - Development Tools

Additional Details

Functions

Output key data files for use in the installation and updating of secure keys

The Security Key Management Tool supports the following functions required for using Renesas security IP modules to install and update secure keys.

  • Generating User Factory Programming Key (UFPK) files in the Renesas Key Wrap Service format
  • Wrapping DLM keys by using the UFPK for the installation of secure keys*
  • Wrapping user keys by using the UFPK for the installation of secure keys
  • Wrapping user keys by using the Key Update Key (KUK) for the updating of secure keys

* Only MCU families/security engines that support DLM Key are supported.

Output files support a variety of file formats

Wrapped key files can be output for different purposes in the file formats listed below.

Format Use Case
Renesas key file*1 Factory key installation
Motorola HEX Factory key installation
C source files Field key update, prototype key installation*2
Binary data Field key update

*1 Only MCU families/security engines that support key injection functionality in the boot firmware are supported.
*2 Not supported for RA SCE9 Protected Mode.

Example of using the Security Key Management Tool during secure key installation

Image
Securiuty-key-en

For more information about secure key installation and update on Renesas devices, please see www.renesas.com/iot-security.