NXP Semiconductors

A5000

EdgeLock Secure Authenticator

Key name

Details and type

Certificate Erasable by

customer

Identifier

Common files

UUID

N/A

No

0x7FFF0206

Platform SCP

Default Value needed to perform

update of the key

N/A

No

N/A

Recovery SCP

Default Value needed to perform

recovery

N/A

No

N/A

ECKey session

Establish an ECC256 based EC

key session

N/A

No

0x7FFF0201

ECKey import

Used for ImportExternalObject

N/A

No

0x7FFF0202

Table 5. Common objects

Configuration

ENC

MAC

DEK

A5000

c9118500b5ffa1433a50226f489a0aa5

29d2fe28f7feeb153068be381f61bc01

6124d38402118060ed910360fc5a4278

Table 6. Default Platform SCP keys

4.3 NXP reserved keys and objects

Key name

Erasable by customer

Identifier

NXP reserved key 1

No

0x7FFF0204

NXP reserved key 2

No

0xF0000020

NXP reserved key 3

No

0xF0003394

Table 7. NXP reserved keys and objects

4.4 X.509 Certificate storage encoding

This paragraph provides details on the storage of X.509v3 Certificates in Binary Files on the Authentication

application.

The command ReadSize can be used to read the size of the complete binary file containing a certificate.

Name

Length [bytes]

Description

X.509 Certificate

variable

(length encoded in X.509)

DER encoded X.509v3 Certificate.

The length can be parsed from the first

TLV sequence which spans over the

complete certificate.

Zero padding

variable

(remaining bytes up to the complete

binary file size)

The file size of the binary file is constant

over all devices of a type, while the

specific device certificate can vary

in size per device (due to the ASN.1

encoding of numbers).

Table 8. Content of certificate binary file

A5000

All information provided in this document is subject to legal disclaimers.

© 2024 NXP B.V. All rights reserved.

Product data sheet

Rev. 1.6 — 5 August 2024

Document feedback

667616

9 / 25