12.2.7.2.1 Bootstrap Ciphering

Before update, the bootstrap must be ciphered and signed in accordance with the Secure Boot mode selected.

The bootstrap can be prepared using the Secure SAM-BA Cipher tool, and then deployed for an update on all devices.

Securing *.cip files

Microchip’s Secure SAM-BA Cipher utility outputs encrypted *.cip files for use in provisioning at final manufacturing. As these files contain both customer keys and firmware, they must be securely stored with restricted and controlled access.