Arrow Development ToolsGG11-LTE-M-SSK | Security Starter Kit with Giant Gecko 11, Xbee3 and Infineon OPTIGA™ Trust MEingebettete Systementwicklungsboards und -kits

Arrow has worked closely with several technology suppliers to create a solution that employ’s ten major security features and take the guesswork out of implementation and reducing your overall time to market. The Arrow Security Starter Kit integrates the FreeRTOS open-source software framework, with readily available wireless evaluation kits from Silicon Labs, Infineon’s OPTIGA™ Trust M secure solution and AWS IoT Core. AWS IoT Core is a service that enables you to connect devices to AWS, while providing secure data, interactions, process and act upon the device data. Using this kit, device makers can easily add security to their end products while adhering to the latest security standards, including ETSI TS 103 645, NISTIR 8259A, and ISO 27001.

Security Starter Kit with Giant Gecko 11, XBee3 and OPTIGA™ Trust M

This combination includes a Trust M S2GO board (Shield2Go) with the EFM32GG11 starter kit and LTE-M Expansion Kit from Silicon Labs for cellular connectivity. The Trust M S2GO Board has one OPTIGA™ Trust M security chip on an easy-to-handle PCB. It provides a root of trust in the form of a unique X.509 certificate coupled with hardware support to establish an LTE-M connection between the device and cloud, forming a robust basis for secured communication.

Security Feature Implemented	Description
Unique Device Identifier	EUI64 is used and stored in the OPTIGA™ Trust M
Secure Boot	Software based secure boot feature performed with OPTIGA™ Trust M
Secure OTA Updates	Implemented software-based capability for OTA updates with OPTIGA™ Trust M
Secure Data (encryption)	Data encrypted and decrypted using keys stored in the OPTIGA™ Trust M
Device Authentication	Device authentication feature enabled in the OPTIGA™ Trust M
Device Management (Allow/Deny)	Performed in AWS Cloud Services
Isolation of secure firmware from non-secure application	Stored in the OPTIGA™ Trust M
Isolation of credentials (keys) in a Tamper-resistant element	Stored in the OPTIGA™ Trust M
X.509 certificate support	A digital certificate to verify that a public key belongs to the Hostname/domain or organization and stored in the OPTIGA™ Trust M
Secure Supply Chain	Register Root CA in AWS and using Root CA to create the device certificate. An Intermediate CA is not employed. Private key and device certificate are stored in the OPTIGA™ Trust M

More Resources

GG11-LTE-M-SSK Product Brief
GG11-LTE-M-SSK Quick Start Guide
GG11-LTE-M-SSK Developer’s Guide
SSK Cloud Connect Quick Start Guide
SSK Cloud Connect User's Guide
Arrow Electronics Github site for Source Code and SSK tar archive