CEC1736-S0-I/2ZW-TFLX

Application Specific Microcontrollers Overview

The CEC1736-S0-I/2ZW-TFLX is a Real Time Platform Root of Trust Controller from the CEC173x-TFLX Trust Shield Family. It features a 96 MHz ARM Cortex-M4F core and supports up to two Application Processors via dual QSPI ports with SPI monitoring. The device includes pre-provisioned Soteria-G3 firmware compliant with NIST 800-193 and OCP standards. Hardware security features include CNSA-based secure boot, AES-256, SHA-384, ECDSA, PUF, and DRNG. It operates in an 84-pin WFBGA package (7x7x0.8 mm) with industrial temperature range (-40°C to +85°C).

Application Specific Microcontrollers Feature Summary

• Dual QSPI ports with SPI Flash Monitoring for up to two Application Processors.
• Pre-provisioned Soteria-G3 firmware supporting Secure Boot, SPDM Attestation, and Crisis Recovery.
• Hardware crypto engine: AES-256, SHA-384, ECDSA, PUF, and DRNG.
• NIST 800-193 and Open Compute Project (OCP) compliant.

Application Specific Microcontrollers Applications

• Servers
• Telecommunications
• Networking
• Industrial systems
• Embedded computing

Application Specific Microcontrollers Procurement Notes

Verify the specific ordering suffix against the Product Identification System table in DS00005379A. Confirm that the '2ZW' suffix corresponds to the required 84-pin WFBGA package and dual SPI monitor configuration. Ensure the 'TFLX' designation matches the need for the pre-provisioned TrustFLEX variant.

Application Specific Microcontrollers Selection Notes

Select this model when support for two Application Processors is required. The 84-pin package provides dual QSPI interfaces compared to the single-port 64-pin alternative. Verify that the industrial temperature range (-40°C to +85°C) meets system environmental requirements.

Application Specific Microcontrollers Part Context

This component is part of the CEC173x Trust Shield family. It is a partially configured variant designed to minimize development time by providing pre-provisioned credentials and firmware. It serves as the platform root of trust controller for securing server and infrastructure platforms.

Application Specific Microcontrollers Replacement Considerations

The CEC1736-S0-I/2HW-TFLX is a pin-compatible alternative in a 64-pin package but supports only one QSPI port and has half the internal flash capacity. Cross-model substitution requires verifying application processor interface constraints.

Application Specific Microcontrollers FAQ

What is the function of the SPI Monitor blocks?

The SPI Monitor blocks maintain Host firmware integrity during boot and runtime by calculating signatures in real-time and intervening to cancel illegal or questionable Flash accesses.

How does the device handle key revocation?

The Boot ROM and EC_FW support multiple public keys for image authentication. If a private key becomes compromised, the corresponding public key can be revoked to prevent unauthorized firmware execution.

What security standards does the Soteria-G3 firmware comply with?

The Soteria-G3 firmware is compliant with NIST 800-193 Platform Resiliency Guidelines and Open Compute Project (OCP) Security Project requirements.