Secure Boot Manager (SBM)
Establishes a Root of Trust (RoT), verifying software authenticity before execution, preventing unauthorized firmware, and protecting against malware, rollback attacks, and unauthorized modifications.
Product
IAR Embedded Trust
Key benefits
IAR Embedded Trust ensures trusted execution, authenticated updates, and threat protection, enabling secure firmware deployment and lifecycle management to help developers meet security requirements with confidence.
Secure firmware updates
Provides anti-rollback protection and ensures only authenticated updates are applied, preventing tampering and unauthorized code execution throughout the device’s lifecycle.
Security contexts
Enables customizable security settings with encryption and authentication, allowing flexible protection tailored to different device requirements and regulatory standards.
Features
IAR Embedded Trust protects against unauthorized access, cloning, and firmware tampering, ensuring trusted boot, secure provisioning, and seamless integration for enhanced device security and integrity
Immutable boot process
Ensures a secure startup by verifying firmware integrity before execution. Cryptographic validation prevents unauthorized modifications, protecting the system from malware, rollback attacks, and untrusted code injection.
Secure provisioning
Safeguards device authenticity with unique identities, preventing cloning and counterfeiting. Combined with IAR Secure Deploy, it enables secure provisioning for both low-volume and mass production, ensuring integrity from manufacturing to deployment.
Seamless integration
Designed to work with IAR Embedded Workbench and Secure Deploy, enabling a streamlined security workflow. Supports shift-left security by integrating protection early while ensuring end-to-end protection from development through provisioning and final deployment.
Flexible security management
A standalone CLI variant supporting ST STM32Cube and NXP MCUXpresso extends security features to externally built applications. The Secure Application Maker (SAM) Tool and Security Context Manager provide enhanced protection beyond traditional development environments.
SESIP Level 1 certification
The SESIP Level 1 certification for IAR Embedded Trust’s Secure Boot Manager (SBM) ensures secure firmware execution, strengthens IoT security compliance, and provides transparency via TrustCB, offering trusted protection for embedded systems.
Blog posts
IAR embedded development platform
Get access to all
Scale development operations with freedom and flexibility, accelerate innovation with code confidence and simplify compliance while strengthening security.
- Architecture and device agnostic
- Cloud-ready, tailored for enterprises
- Functional safety always included
- End-to-end embedded security
With our platform, you get access to everything.
