Open Hardware & RISC-V

Variscite adds firmware TPM 2.0 to all NXP i.MX SOMs via OTA update

Key Takeaway

Variscite is enabling TPM 2.0 functionality through a firmware update on existing i.MX 6 through i.MX 9 modules, without requiring hardware redesigns.

Summary

Variscite has partnered with SecEdge to deliver firmware-based TPM 2.0 (fTPM) across its entire NXP i.MX SOM lineup, from i.MX 6 to i.MX 9. The SEC-TPM feature activates via over-the-air firmware update using existing on-chip security hardware, eliminating the need for customers to redesign hardware to gain trusted computing capabilities. The timing addresses the EU Cyber Resilience Act's December 11 deadline requiring secure default configurations for cryptographic key protection.

How SEC-TPM works on i.MX hardware

  • SEC-TPM implements TPM 2.0 functionality in firmware rather than as a discrete hardware module
  • Uses existing security hardware already present on NXP i.MX SoCs, referred to as firmware TPM (fTPM)
  • Activated via over-the-air (OTA) firmware update across i.MX 6, i.MX 7, i.MX 8, and i.MX 9 SOMs
  • Certified for TPM 2.0 compliance through the Trusted Computing Group (TCG)
  • Available now from Variscite's Developer Center for all supported modules

Why it matters

This allows embedded device manufacturers to retrofit TPM 2.0 compliance onto already-deployed hardware, reducing e-waste and avoiding costly redesigns for EU market access. The approach could set a precedent for other SOM vendors facing similar regulatory pressure.

Original reference: www.hackster.io →