NXP Semiconductors SE051C2HQ1/Z01XDZ

Overview

SE051C2HQ1/Z01XDZ from NXP Semiconductors is a Common Criteria EAL 6+ certified secure element IC designed as an I²C-connected auxiliary security device for IoT host controllers. It supports SCP03-secured communication, cryptographic acceleration (ECC, AES, SHA), and secure key storage. It is used in embedded IoT endpoints requiring root-of-trust for TLS onboarding, firmware signing, and device authentication.

For engineers reviewing the SE051C2HQ1/Z01XDZ datasheet, SE051C2HQ1/Z01XDZ pinout, SE051C2HQ1/Z01XDZ application, or SE051C2HQ1/Z01XDZ equivalent, this page delivers verified technical context, I²C interface behavior, SCP03 binding requirements, secure applet versioning (SE05X_C, v07.02), and real-world integration constraints with i.MX RT, Kinetis, and Linux-based hosts.

Technical Context

The SE051C2HQ1/Z01XDZ implements a Java Card OS-based secure execution environment with dedicated cryptographic coprocessor hardware. It operates exclusively as an I²C target device (7-bit address 0x48) under host controller management and supports optional secondary I²C for sensor node interfacing.

It runs the SE05X_C applet (v07.02), enables Platform SCP via configurable AES-128 keys (Key-ENC/MAC/DEK), and provides SSS API access to ECC P-256/P-384, AES-128/256, SHA-256, and secure key derivation - all isolated from host memory.

Key Specifications

Availability

SE051C2HQ1/Z01XDZ is available at Aetrix Electronics and suitable for industrial IoT gateways, medical edge devices, and smart metering systems requiring stable component supply, long-term security lifecycle assurance, and traceable sourcing.

Supply support for SE051C2HQ1/Z01XDZ includes scheduled delivery planning, volume procurement assistance, BOM continuity management, traceable sourcing, and lifecycle availability coordination for OEM customers, industrial embedded developers, connected-device designers, and electronics production programs.

Manufacturer

NXP Semiconductors is a global semiconductor leader specializing in secure connectivity solutions for automotive, industrial, and IoT applications.

The EdgeLock SE05x product line delivers plug-and-trust secure elements optimized for rapid integration into resource-constrained IoT endpoints, with emphasis on zero-touch cloud onboarding, firmware integrity verification, and hardware-rooted identity management.

FAQ

What is the primary function of the SE051C2HQ1/Z01XDZ in an IoT system?

The SE051C2HQ1/Z01XDZ serves as a tamper-resistant secure element that acts as the root of trust for IoT endpoints. It handles cryptographic operations, stores private keys securely, enforces secure boot policies, and enables authenticated TLS handshakes - all while isolating sensitive assets from the main host processor. Its role is strictly auxiliary: it does not replace the host MCU but augments its security posture via I²C.

Does the SE051C2HQ1/Z01XDZ support both plain and secured I²C communication?

Yes, the SE051C2HQ1/Z01XDZ supports both modes. Plain I²C (CLA 0x80 APDUs) is enabled by default for development, but production deployments require Platform SCP (SCP03) activation using pre-shared AES-128 keys. When SCP03 is enabled, all command/response data is encrypted and MAC-protected, preventing eavesdropping or man-in-the-middle attacks on the I²C bus.

Which host platforms are officially supported for SE051C2HQ1/Z01XDZ integration?

The SE051C2HQ1/Z01XDZ is validated with NXP's i.MX RT1060-EVK, i.MX RT1170-EVK, FRDM-K64F, LPC55S69-EVK, MCIMX8M-EVK, and Raspberry Pi platforms. Integration uses the Plug & Trust Full Multiplatform Middleware (v04.02.0x+), which abstracts low-level APDUs into SSS API calls compatible with OpenSSL and mbedTLS stacks.

How is the SE051C2HQ1/Z01XDZ configured for SCP03 binding during firmware build?

SCP03 binding is configured at compile time via CMake options in the Plug & Trust Middleware. For SE051C2HQ1/Z01XDZ, set PTMW_Applet=SE05X_C, PTMW_SE05X_Ver=07_02, and enable SSSFTR_SE05X_RSA=disabled. Platform SCP keys are selected using SSS_PFSCP_ENABLE_SE051C_0005A8FA in fsl_sss_ftr.h.in - matching its OEF ID A8FA per AN13013 Table 7 and Table 14.

Is the SE051C2HQ1/Z01XDZ pin-compatible with other EdgeLock SE05x variants like SE050 or SE052?

No documented pin-to-pin compatibility exists between SE051C2HQ1/Z01XDZ and SE050 or SE052 variants. While all EdgeLock SE05x devices use identical QFN48 packaging and share core I²C signal mapping (SDA/SCL/VDD/GND), differences in internal routing, voltage tolerance, and optional features (e.g., contactless antenna pads on SE052) preclude guaranteed drop-in replacement without validation. Each variant requires specific middleware configuration and applet selection.