The plan for generating, storing, using, rotating and revoking the cryptographic keys that sign firmware and protect devices, from development through production and end of life.
Plan Work product in the Firmware and software stack lifecycle
It protects the keys that the boot ROM and update system trust, because a leaked signing key lets anyone run code on every device. Keys left on developer machines cannot be revoked, and production signing comes to depend on individuals.
The full lifecycle detail, with its charts, flows, tables and every section, is for registered members. Registration is free and takes a minute. You come back to this page afterwards.