Image
Jump to Page Section:
Back to top
Overview
Description
Topics
- New release: Security Key Management Tool V.1.03
- Plug-in version of e² studio is released.
- RA SCE9 Compatibility Mode and RA SCE5_B are supported.
- RSA 3072/4096bit are added to RX TSIP supported key algorithm.
The Security Key Management Tool is a key-wrapping tool for use with key-management systems that use security IP modules incorporated in Renesas MCUs and MPUs. This tool is provided to assist in the secure installation and updating of user-application keys and device lifecycle management (DLM) keys.
Features
- Compliant with key-management systems that use security IP modules incorporated in Renesas MCUs and MPUs
- Wrapping of user application keys and DLM keys for secure key installation and secure key updating
- Key data files can be output in a variety of file formats
- See details for functions
Release Information
Release Information
- Latest Ver. V.1.03
- Released：Dec 29, 2022
- Operating Environment
| Supported Device Family | Security IP |
|---|---|
| RA | SCE9 (Protected Mode, Compatibility Mode), SCE7, SCE5, SCE5_B |
| RE | TSIP-Lite |
| RX | TSIP, TSIP-Lite |
| RZ | TSIP |
| Synergy | SCE7, SCE5 |
Target Devices
Other Target Families*
- RE Family
- RZ Family
- *Contact Technical Support or Sales for details of these target devices. Contact Us
Synergy Download
Additional Details
Functions
Output key data files for use in the installation and updating of secure keys
The Security Key Management Tool supports the following functions required for using Renesas security IP modules to install and update secure keys.
- Generating User Factory Programming Key (UFPK) files in the Renesas Key Wrap Service format
- Wrapping DLM keys by using the UFPK for the installation of secure keys*
- Wrapping user keys by using the UFPK for the installation of secure keys
- Wrapping user keys by using the Key Update Key (KUK) for the updating of secure keys
* Only MCU families/security engines that support DLM Key are supported.
Output files support a variety of file formats
Wrapped key files can be output for different purposes in the file formats listed below.
| Format | Use Case |
|---|---|
| Renesas key file*1 | Factory key installation |
| Motorola HEX | Factory key installation |
| C source files | Field key update, prototype key installation*2 |
| Binary data | Field key update |
*1 Only MCU families/security engines that support key injection functionality in the boot firmware are supported.
*2 Not supported for RA SCE9 Protected Mode.
Example of using the Security Key Management Tool during secure key installation
For more information about secure key installation and update on Renesas devices, please see www.renesas.com/iot-security.