5 SHA106 Trust Platform Variants and Provisioning Services

Microchip offers secure provisioning services for the SHA106 through the Trust Platform. It leverages the Trust Platform Design Suite (TPDS) set of tools, and currently offers 3 provisioning flows:

  • Trust&GO: Pre-configured and pre-provisioned Secure Elements for fix-function Use Cases
  • TrustFLEX: Pre-configured & provisioned Secure Element with customer-unique credentials
  • TrustCUSTOM: Fully customizable Secure Element including configuration and provisioning with customer-unique credentials

The Trust&GO flow provides pre-configured and pre-provisioned secure elements. These products are defined to meet common use case applications for customers that do not require unique credentials. These devices are provided as-is and can be ordered directly from Microchip as easily as any standard product.

The TrustFLEX flow leverages the TrustFLEX configurator to input unique customer credentials into a pre-defined configuration and generate a Secure Exchange Package. This package is, then, deployed via the Microchip Secure Provisioning System to enable device ordering. Then, only the customer designated in the Secure Exchange Package can order these devices.

The TrustCUSTOM flow leverages the TrustCUSTOM configurator and provides the ability to fully configure the SHA106 device to meet the security requirements for a given application. At the end of the process, a Secure Exchange Package is generated that is deployed to the Microchip Secure Provisioning System. Then, only the customer designated in the Secure Exchange Package can order these devices.

Important: Microchip's test sites, that provide secure provisioning services, are equipped with Hardware Security Modules (HSMs) to ensure the security of customer data throughout the provisioning process.

SHA106 Trust Platform Products

The SHA106 is supported by Microchip's Trust Platform provisioning flow. The TPDS tools can be used to support configuring the devices for the purpose of prototyping, design evaluation and secure provisioning services (i.e., onboarding). The device is only available in the 2-Lead VSFN package and only the SWI is possible. Through use of the EV98D91A 2-Lead VSFN Socket Kit, combined with the DM320118 Trust Platform development board, units can be configured and programmed. For Trust Products with similar capabilities to the SHA106, review the SHA104 and SHA104-TFLXAUTH products on the Microchip website.