FTM / Security & Encryption / STMicroelectronics — STM32TRUSTEE-SM Secure Manager Software

STMicroelectronics — STM32TRUSTEE-SM Secure Manager Software

Security & Encryption

August 1, 2024
Security & Encryption
Issue 6 2024

Ready-made software package reduces need to write custom security software

The STM32Trust TEE secure manager from STMicroelectronics, running on compatible STM32 MCUs, provides the software to perform all important security functions for embedded devices, and for compliance with security standards.

The STM32Trust TEE secure manager software from STMicroelectronics simplifies the development of secure embedded applications based on STM32 microcontrollers, relieving developers of the need to write and validate their own code, and providing security services which are consistent with industry best practice.

The STM32H573xx series of microcontrollers are the first to support the STM32Trust TEE secure manager, which is available with the part number STM32TRUSTEE-SM.

The STM32Trust TEE secure manager consists of two types of software package:

The STM32Trust TEE secure manager access kit
The STM32Trust TEE secure module development kit

The STM32Trust TEE secure manager access kit (SMAK) can be easily installed into STM32 MCU products on the production line. It offers a ready to use, high-performance, and certified set of security capabilities that are compatible with the Arm® PSA specifications, including:

Secure boot
Root-of-trust
Cryptography
Internal trusted storage
Initial attestation
Firmware updates

The STM32Trust TEE SMAK binary code runs in isolated Arm® TrustZone® hardware, which protects both its capabilities and the secure credentials that it manages and stores for the application. OEMs develop, debug, and protect the application firmware in the normal way, and call STM32Trust TEE SMAK secure functions when required.

The STM32Trust TEE secure manager solution is integrated with the existing STM32 ecosystem of tools including the STM32CubeMX initialization code generator, the STM32CubeIDE integrated development environment, and the STM32CubeProgrammer ST-LINK programmer.

The STM32Trust TEE SMAK binary can be complemented by new secure functions, called secure software modules, developed by STMicroelectronics, OEMs, or ST partners which want to sell and protect the software intellectual property. The STM32Trust TEE secure module development kit (SMDK) supports the development of these new secure software modules.