Cypress CY8CKIT-064B0S2-4343W Manual page 35

CY8CKIT-064B0S2-4343W PSoC 64 "Secure Boot" Wi-Fi BT Pioneer Kit Guide, Document Number: 002-29286 Rev. *E
Arrow.com.
Downloaded from
The four template policy files shown for this example are:
policy_multi_CM0_CM4_smif_swap.json - Multiple application images, serial memory interface
enabled, SWAP update mode.
policy_multi_CM0_CM4_swap.json - Multiple application images, serial interface disabled,
SWAP update mode.
policy_single_CM0_CM4_smif_swap.json - Single application image, serial interface enabled,
SWAP update mode.
policy_single_CM0_CM4_swap.json - Single application image, serial interface enabled, SWAP
update mode. (Default)
3. Create new keys.
What does this step do?
"CySecureTools" reads the provided policy and generates the keys defined.
Depending on the policy chosen, there can be multiple keys generated under the "keys" folder.
By default only one key, the USERAPP_CM4_KEY, a P-256 Elliptic curve key-pair is
generated.
"CySecureTools" generates keys in two formats, PEM and JSON. Both the PEM and JSON
files represent the same key.
For a full description of all fields, please refer to the
Run the following command:
cysecuretools --target cyb06xxa --policy ./policy/
policy_single_CM0_CM4_swap.json create-keys
After running this step, the 'keys' directory will have public/private key pairs and symmetric key
pairs (if encrypt is enabled) generated according to the policy. These keys are used either to sign
(or) encrypt images built by ModusToolbox software.
Figure 4-7. Project Workspace having a new 'keys' directory
Running Code on PSoC 64 "Secure Boot" MCUs
"Secure Boot" SDK user guide.
34