Secure Production Programming
Overview
How to Prevent Overbuilding and Cloning
Overbuilding of electronic systems is the fastest way for OEMs to go out of business. When a contract manufacturer has the bill of materials (BOM), programming files, and test programs, they have everything they need to build more than they are authorized to build. Overbuilding can result in a significant loss of revenue, and additional support costs for systems that generated zero revenue for you.
Microsemi's Secure Production Programming Solution (SPPS)
Using Thales e-Security FIPS140-2 level 3 certified hardware security modules (HSMs), custom firmware and the state-of-the-art security protocols built into every Microsemi PolarFire FPGA, SmartFusion2 SoC FPGA and IGLOO2 FPGA, customers can automatically prevent overbuilding of their systems in any manufacturing facility anywhere in the world, saving millions of dollars in lost revenue.
How Does Secure Production Programming Work - Press Play to Watch Video
Using Microsemi's Secure Production Programming Solution
- The customer can control exactly how many devices are to be programmed
- The customer can specify who will be programming the devices
- The contract manufacturer can only program the exact number of devices specified
- Only validated Microsemi original devices can be programmed
No one else can access the programming information, and the system will not allow additional units to be programmed. No more Overbuilding!
Documents
User Guides and Manuals - Libero SoC v 12.6
User Guides and Manuals - Libero SoC v 12.0
User Guides and Manuals - Libero SoC v 11.8 SP3
User Guides and Manuals - Libero SoC v 11.8 SP1
User Guides and Manuals - Libero SoC v 11.7 SP2
Hardware
Hardware Security Modules
A Hardware Security Module or HSM is a tamper-resistant device designed to:
- Generate keys securely
- Store keys (encrypted) securely outside the module
- Facilitate the use of sensitive key material
- Execute standard and custom algorithms requiring use of protected keys
Microsemi offers two options for HSMs, these devices would be purchased once and can then be used for all future designs and manufacturing with Microsemi PolarFire, SmartFusion2 and IGLOO2 devices. Customer should purchase two devices, one for themselves and one for manufacturing. Microsemi is an official reseller of the Thales modules:
- nShield Edge, a USB-attached device
- nShield Solo, a module with a PCIe interface
The Solo or Edge can be used as either a U-HSM or M-HSM.
These HSMs must be purchased from Microsemi - Contact your local Microsemi Sales representative
nShield Edge
|
 |
nShield Solo
|
 |
Software
SPPS Software Tools
Microsemi’s Secure Production Programming Solution (SPPS) solution is a set of software and hardware components that allow user to securely program Microsemi PolarFire, SmartFusion2 and IGLOO2 devices.
SPPS Software tools for Libero SoC v12.6 (01/12/2021):
- Secure Production Programming Solution (SPPS) Release Notes for Libero SoC v12.6
- Download User HSM Server for Libero SoC v12.6
- Download Manufacturer HSM Server for Libero SoC v12.6
SPPS Software tools for Libero SoC v12.0 (03/12/2019):
- Secure Production Programming Solution (SPPS) Release Notes for Libero SoC v12.0
- Download User HSM Server for Libero SoC v12.0
- Download Manufacturer HSM Server for Libero SoC v12.0
SPPS Software tools for Libero SoC v11.8 SP3 (06/21/2018):
- Secure Production Programming Solution (SPPS) Release Notes for Libero SoC v11.8 SP3
- Download User HSM Server for Libero SoC v11.8 SP3
- Download Manufacturer HSM Server for Libero SoC v11.8 SP3
SPPS Software tools for Libero SoC v11.8 SP1 (08/28/2017):
- Secure Production Programming Solution (SPPS) Release Notes for Libero SoC v11.8 SP1
- Download User HSM Server for Libero SoC v11.8 SP1
- Download Manufacturer HSM Server for Libero SoC v11.8 SP1
SPPS Software tools for Libero SoC v11.7 SP2 (08/18/2017):
- Secure Production Programming Solution (SPPS) Release Notes for Libero SoC v11.7 SP2
- Download User HSM Server for Libero SoC v11.7 SP2
- Download Manufacturer HSM Server for Libero SoC v11.7 SP2
Important Note:
- Libero: The Export Job Manager Data Tool in libero exports the Job Data File (.jdc)
- Job Manager: New application in the tool chain that is installed as as part of Libero SoC by default or as part of Programming and Debug Tools Bundle.
- FlashPro Express: Integrated SPPS functionalities required to interface with Thales HSM to manage secured programming job and programming process, ensuring user keys and design are protected and overbuild protection is enforced.
SPPS HSM server Installation and Configuration
New in v11.7 are the SPPS User and Manufacturing Hardware Security Module (U-HSM and M-HSM) Server install and setup packages. The HSM servers supports both single machine and client-server setup models:
- Single machine: Installed and setup on the same windows machine where Libero SoC or Program and Debug Software Bundle is installed.
- Client-Server: Installed Windows different machine separate from Libero SoC or Program and Debug Software Bundle. In Client-Servers setup model, from Libero SoC or Program and Debug Software Bundle can be installed on any of the supported Windows or Linux platforms.
For further information on installation of HSM servers please contact soc_marketing@microsemi.com
The U-HSM and M-HSM includes:
- User HSM (U-HSM) Server
- Setup utility for U-HSM Server
- Manufacturer HSM (M-HSM) server
- Setup utility for M-HSM Server
Supported Platforms
Microsemi tests and supports the latest releases on the specific operating systems shown in the chart below. We are committed to resolving problems encountered by customers on these supported operating systems. We do not support untested operating systems or versions.
|
Operating System |
U-HSM Server |
U-HSM Server Setup Utility |
M-HSM Server |
M-HSM Server Setup Utility |
|
Windows 8.1 |
√ |
√ |
√ |
√ |
|
Windows 7 |
√ |
√ |
√ |
√ |
Notes:
- Tools are supported on 32 bit and 64-bit operating systems.
- Windows XP is no longer supported
Training
Prevent Overbuilding and Cloning
User's Guides
Secure Production Programming Solution Users Guide (1.39 MB)
Parametric Search
- {{n+1}} Showing per page
| Parts | Part Status | package Type | Package Carrier | {{attribute.name | noComma}} ({{attribute.type}}) |
