The ATECC608A-TNGTLS has 16 slots that are configured for different use cases. Below is a summary of those slots with their configuration and proposed uses for the ATECC608A-TNGTLS:
| Slot | Use Case | Description | Primary Configuration |
|---|---|---|---|
| 0 | Primary private key | Primary authentication key. | Permanent, Ext Sign, ECDH |
| 1 | Internal sign private key | Private key that can only be used to attest to the internal keys and state of the device. It cannot be used to sign arbitrary messages. | Permanent, Int Sign |
| 2 | Secondary private key 1 | Secondary private key for other uses. | Updatable, Ext Sign, ECDH, Lockable |
| 3 | Secondary private key 2 | Secondary private key for other uses. | Updatable, Ext Sign, ECDH, Lockable |
| 4 | Secondary private key 3 | Secondary private key for other uses. | Updatable, Ext Sign, ECDH, Lockable |
| 5 | MAC Address | IEEE EUI-48 MAC Address | Permanent, Clear Text Read |
| 6 | IO protection key | Key used to protect the I2C bus communication (IO) of certain commands. Requires setup before use. | No read, Always write, Lockable |
| 7 | Reserved | — | — |
| 8 | General data | General purpose data storage (416 bytes). | Clear read, Always write, Lockable |
| 9 | AES key | Intermediate key storage for ECDH and KDF output. | No read, Always write, AES key |
| 10 | Device compressed certificate | Certificate primary public key in the CryptoAuthentication™ compressed format. | Clear read, No write |
| 11 | Signer public key | Public key for the CA (signer) that signed the device cert. | Clear read, No write |
| 12 | Signer compressed certificate | Certificate for the CA (signer) certificate for the device certificate in the CryptoAuthentication™ compressed format. | Clear read, No write |
| 13 | Reserved | — | — |
| 14 | Reserved | — | — |
| 15 | Reserved | — | — |