STMicroelectronics ST33HTPH2X32AHE4
- Part No.:
- ST33HTPH2X32AHE4
- Manufacturer:
- STMicroelectronics
- Category:
- Application Specific Microcontrollers
- Package:
- 32-VFQFN Exposed Pad
- Datasheet:
-
ST33HTPH2X32AHE4.pdf
- Description:
- LINEAR IC'S
- Quantity:
- Payment:

- Shipping:

Inventory:2,830
Please send an inquiry. Send us your inquiry, and we will respond immediately.
Product details
Overview
ST33HTPH2X32AHE4 from STMicroelectronics is a Flash-memory-based Trusted Platform Module (TPM) 2.0 compliant with TCG Library Specification 2.0 Level 0 Rev 159 (errata 1.1) and PC Client Platform Specification 1.05 rev 14. It implements SPI interface up to 33 MHz, supports 1.8 V or 3.3 V supply, operates from −40 °C to 105 °C, and integrates FIPS SP800-90A/B- and AIS20/31-compliant DRBG/TRNG for cryptographic key generation (RSA 1024–3072, ECC NIST P-256/P-384), used in secure boot and platform attestation on industrial PCs and embedded controllers.
For engineers reviewing the ST33HTPH2X32AHE4 datasheet, ST33HTPH2X32AHE4 pinout, ST33HTPH2X32AHE4 application, or ST33HTPH2X32AHE4 equivalent, this page delivers verified TPM 2.0 functional compliance, SPI timing constraints (CPOL=0, CPHA=0), fault-tolerant firmware loader behavior, EAL4+ CC and FIPS 140-2 Level 2 certification status, and GPIO mapping for Physical Presence (GPIO_PP) and Low Power (GPIO_LP) control - all confirmed against DS14186 Rev 1.
Technical Context
The ST33HTPH2X32AHE4 implements a TCG-compliant SPI slave interface with fixed CPOL=0/CPHA=0 mode, 24-bit address decoding in the 0xD4_xxxx range, and active-low interrupt signaling via open-drain SPI_PIRQ. It supports both FIFO (legacy and extended) and CRB register access models per TCG PTP 2.0 r1.05.
Its security architecture includes active shield, environmental sensors (power monitoring), hardware/software fault injection protection, and dual random-number generators: deterministic (DRBG) compliant with FIPS SP800-90A/AIS20 and true (TRNG) compliant with FIPS SP800-90B/AIS31. Cryptographic acceleration covers RSA, ECC (NIST P-256/P-384/BN-256), AES-128/192/256, TDES, SHA-1/2/3, and HMAC.
Key Specifications
| Parameter | Value and Actual Design Meaning |
|---|---|
| TPM Standard | TCG TPM Library Spec 2.0 Level 0 Rev 159 (errata 1.1); PC Client Platform Spec 1.05 rev 14 - enables Windows 10/11, Linux, and Intel vPro® compatibility. |
| SPI Interface | Up to 33 MHz, CPOL=0/CPHA=0, 24-bit addressing (0xD4_xxxx), legacy & extended FIFO support - defines host communication protocol and timing margins. |
| Supply Voltage | 1.8 V (−25 °C to +85 °C) or 3.3 V (−40 °C to +105 °C) - determines thermal operating envelope and system power rail selection. |
| Cryptographic Engines | RSA 1024/2048/3072, ECC NIST P-256/P-384/BN-256, AES-128/192/256, SHA-1/256/384/512, SHA-3-256/384 - enables full TPM 2.0 command set execution including signing, sealing, and attestation. |
| Security Certifications | CC EAL4+ (AVA_VAN.5, ALC_FLR.1), FIPS 140-2 Level 2 (physical security level 3), SP800-193 compliant - validates protection, detection, and recovery capabilities for regulated deployments. |
| Pre-provisioned Keys | Three endorsement keys (RSA2048, ECC P-256, ECC P-384) with certificates + three 2048-bit RSA key pairs - reduces initial provisioning time and enables multi-root trust model setup. |
| ESD Protection | 4 kV HBM, 750 V CDM - ensures robustness during board handling and system integration in industrial environments. |
Pinout & Package
VFQFPN32 package (5 × 5 mm, 0.5 mm pitch), ECOPACK2-compliant, with exposed thermal pad (Pin 33, not internally connected).
| Pin/Terminal | Circuit Role | Design Meaning |
|---|---|---|
| VPS | Power supply input | Must connect to 1.8 V or 3.3 V motherboard rail; defines operating voltage and temperature grade. |
| GND | Ground reference | Connects to main motherboard ground plane; required for noise immunity and signal integrity. |
| SPI_RST | Active-low reset input | Re-initializes TPM state; external pull-up required if not actively driven by host. |
| SPI_MISO | Master Input, Slave Output | TPM drives data on falling edge of SPI_CLK; sampled by host on rising edge - defines SPI timing alignment. |
| SPI_MOSI | Master Output, Slave Input | Host drives command/address/data; msb-first transfer per TCG PTP 2.0 - enforces strict bit-ordering compliance. |
| SPI_CLK | Serial clock input | Host-generated clock; must be low at SPI_CS falling edge per integration requirement - prevents timing violation. |
| SPI_CS | Chip select (active low) | Starts frame on falling edge; high-to-low transition triggers TPM to drive MISO low - defines transaction boundary. |
| SPI_PIRQ | Interrupt output (open drain) | Active-low signal indicating status change (e.g., command completion); requires external pull-up - enables asynchronous host notification. |
| GPIO_PP | Physical Presence input | Active-high, internal pull-down; signals user-initiated secure operation (e.g., clearing owner hierarchy) - fulfills TCG physical presence requirement. |
| GPIO_LP | Low-power mode control | By default enables/disables TPM Standby mode (TPMLowPowerByGpio); configurable via NV storage index - supports dynamic power management. |
Key Features
| Feature | Design Value |
|---|---|
| Fault-tolerant firmware loader | Self-recovery capability maintains TPM functionality even if firmware update is interrupted - eliminates field failure due to power loss during upgrade. |
| SP800-193 compliance | Integrated protection, detection, and recovery mechanisms for firmware and critical data - satisfies NIST requirements for resilient cryptographic module operation. |
| Dual RNG architecture | Separate FIPS SP800-90A/AIS20 DRBG and SP800-90B/AIS31 TRNG - provides cryptographically sound entropy sources for key generation and nonces. |
| Multi-voltage operation | Single device supports 1.8 V (commercial temp) and 3.3 V (extended temp) rails - simplifies BOM across industrial and computing platforms. |
| Pre-provisioned endorsement keys | Three EKs (RSA2048, ECC P-256, ECC P-384) with certificates pre-loaded - accelerates OEM root-of-trust deployment without factory provisioning step. |
Applications
| Secure Boot Validation | Platform Attestation |
|---|---|
|
Use Scenario: Verifying integrity of bootloader and OS kernel before execution on an industrial controller. IC Role / Device Role / Timing Role: TPM acts as root-of-trust for measured boot; performs SHA-256 hashing and RSA signature verification of PCR values. Use Value: Prevents unauthorized firmware modification by binding boot measurements to hardware-bound keys - enforced via EK and SRK. |
Use Scenario: Proving runtime integrity of a medical imaging device to a remote cloud service. IC Role / Device Role / Timing Role: Generates signed quotes containing PCR values and nonce using ECDSA over NIST P-256 curve. Use Value: Enables zero-trust authentication with verifiable evidence of unaltered software stack - supported by certified CC EAL4+ and FIPS 140-2 Level 2. |
| Firmware Update Authentication | Hardware-Based Key Storage |
|
Use Scenario: Securing over-the-air firmware updates for automotive telematics units. IC Role / Device Role / Timing Role: Validates digital signatures on update packages using RSAES-OAEP decryption and RSASSA-PSS verification. Use Value: Ensures only cryptographically signed updates execute, preventing rollback or malicious payload injection - enforced by flash-resident trusted code. |
Use Scenario: Storing TLS private keys for secure communication in networked IoT gateways. IC Role / Device Role / Timing Role: Provides isolated, tamper-resistant storage for asymmetric key pairs (RSA/ECC) and symmetric keys (AES). Use Value: Prevents key extraction via side-channel or physical attack - enabled by active shield, environmental sensors, and fault injection countermeasures. |
Equivalent & Alternatives
The following parts are listed as comparable options for similar TPM 2.0 applications.
| Alternative Part | Technical Difference | Application Difference | Selection Advice |
|---|---|---|---|
| Infineon SLB9670 | Supports LPC interface in addition to SPI; lacks GPIO_LP for hardware-controlled standby mode. | Targeted at legacy x86 platforms requiring LPC; less suitable for space-constrained ARM-based designs needing GPIO-driven power management. | Select when LPC interface is mandatory or when leveraging Infineon's broader TPM ecosystem tools. |
| Nuvoton NPCT750 | Offers I²C interface option; certified to FIPS 140-2 Level 1 only (not Level 2) and no CC EAL4+ certification. | Applicable in cost-sensitive consumer electronics where full FIPS Level 2 or CC certification is not required. | Select for non-regulated applications prioritizing interface flexibility over formal security validation. |
Compared with SLB9670 and NPCT750, the ST33HTPH2X32AHE4 uniquely combines extended temperature operation (−40 °C to +105 °C at 3.3 V), GPIO-controlled low-power mode, and dual-certified security (CC EAL4+, FIPS 140-2 Level 2), making it optimal for ruggedized industrial and automotive edge devices requiring long-term lifecycle assurance.
Availability
ST33HTPH2X32AHE4 is available at Aetrix Electronics and suitable for secure boot validation, platform attestation, firmware update authentication, and hardware-based key storage requiring stable component supply across industrial, automotive, and computing applications.
Supply support for ST33HTPH2X32AHE4 includes scheduled delivery planning, volume procurement assistance, BOM continuity management, traceable sourcing, and lifecycle availability coordination for OEM customers, industrial embedded developers, connected-device designers, and electronics production programs.
Manufacturer
STMicroelectronics is a global semiconductor leader headquartered in Geneva, Switzerland, designing and manufacturing microcontrollers, analog ICs, MEMS, and secure elements for industrial, automotive, and consumer markets.
The STSAFE-TPM product line delivers certified, standards-compliant trusted platform modules focused on embedded and PC platforms requiring hardware-rooted security, cryptographic acceleration, and long-term certification maintenance.
FAQ
What is the maximum SPI clock frequency supported by ST33HTPH2X32AHE4?
The device supports SPI operation up to 33 MHz, as specified in the DS14186 Rev 1 datasheet. This frequency applies under standard load conditions with proper signal integrity; timing margins must be validated per Figure 7 (SPI slave timing diagram) where SPI_CLK must be low at SPI_CS falling edge.
Does ST33HTPH2X32AHE4 support both FIFO and CRB access modes?
Yes - it implements both legacy FIFO (offsets 0x0024–0x0027) and extended FIFO (offsets 0x0081–0x0083), as well as Command Response Buffer (CRB) registers (e.g., TPM_CRB_CTRL_REQ_x). The CRB interface is fully compliant with TCG PTP 2.0 r1.05 for locality-aware command execution.
How does the fault-tolerant firmware loader recover from interruption?
The loader uses redundant firmware sectors and atomic write sequencing to ensure partial writes do not corrupt operational code. Upon reset after interruption, the TPM automatically detects incomplete update state and restores from backup image - no host intervention or external recovery tool is required.
Is the VFQFPN32 package lead-free and RoHS compliant?
Yes - the VFQFPN32 package is ECOPACK2-compliant, meeting RoHS Directive 2011/65/EU and REACH Regulation (EC) No 1907/2006. The "ECOPACK" marking confirms halogen-free materials and lead-free terminations per JEDEC J-STD-020 moisture sensitivity level 3.
ST33HTPH2X32AHE4 Specifications
- Product attributes
- Attribute value
- Manufacturer:
- STMicroelectronics
- Series:
- ST33
- Package/Case:
- 32-VFQFN Exposed Pad
- Packaging:
- Bulk
- Product Status:
- Active
- Programmable:
- -
- Applications:
- Trusted Platform Module (TPM)
- Core Processor:
- SecurCore® SC300™
- Program Memory Type:
- FLASH
- Controller Series:
- ST33TPHF2ESPI
- RAM Size:
- -
- Interface:
- SPI
- Number of I/O:
- 2
- Voltage - Supply:
- 1.8V, 3.3V
- Operating Temperature:
- -40°C ~ 105°C (TA)
- Grade:
- -
- Qualification:
- -
- Mounting Type:
- Surface Mount
- Supplier Device Package:
- 32-VFQFPN (5x5)
ST33HTPH2X32AHE4 FAQ
1.How can I place an order for ST33HTPH2X32AHE4 through Aetrix?
Please submit a Request for Quotation (RFQ) for ST33HTPH2X32AHE4 on Aetrix. Our sales agent will provide a competitive quotation and guide you through the order confirmation once you accept the terms.
2.Are the price and stock information for ST33HTPH2X32AHE4 reliable?
The price and inventory of ST33HTPH2X32AHE4 are updated periodically and may fluctuate due to market conditions. Stock and pricing data are typically refreshed every 24 hours. Quotation validity for ST33HTPH2X32AHE4 is usually 5 days.
3.What payment methods are accepted for ST33HTPH2X32AHE4?
We accept Wire Transfer, PayPal, Credit Card, Western Union, MoneyGram, and Escrow for ST33HTPH2X32AHE4 transactions.
Note: Certain payment methods may incur a processing fee.
4.How is shipping managed for ST33HTPH2X32AHE4?
ST33HTPH2X32AHE4 orders can be shipped via leading logistics carriers, including DHL, UPS, FedEx, TNT, or Registered Mail.
Once your ST33HTPH2X32AHE4 order is processed, you will receive an email with the shipment details and tracking number.
Note: Tracking information may take up to 24 hours to appear. Express delivery typically takes 3–5 business days.
5.How can I obtain technical support or documentation for ST33HTPH2X32AHE4?
For technical support, including ST33HTPH2X32AHE4 datasheets, pinout diagrams, or application guidance, please contact our engineering support team. They can provide detailed documentation and assistance for your ST33HTPH2X32AHE4 requirements.
6.How does Aetrix verify that ST33HTPH2X32AHE4 is sourced from the original manufacturer or authorized distributors?
All ST33HTPH2X32AHE4 products on Aetrix are procured from qualified distributors and authorized channels. Our dedicated quality assurance team conducts strict verification, including traceability checks and, if necessary, third-party testing. This ensures that ST33HTPH2X32AHE4 meets industry standards.
7.What is the process for return or replacement of ST33HTPH2X32AHE4?
All ST33HTPH2X32AHE4 units undergo pre-shipment inspection (PSI). If there is an issue with ST33HTPH2X32AHE4, returns or replacements are accepted under the following conditions:
1.Quantity discrepancies, incorrect items, or visible external defects (such as breakage or corrosion), acknowledged by Aetrix.
2.The issue is reported within 90 days of delivery.
3.The ST33HTPH2X32AHE4 part is unused and in its original packaging.
Return procedure for ST33HTPH2X32AHE4:
1.Submit a request within 90 days.
2.Obtain a Return Material Authorization (RMA) from Aetrix.
ST33HTPH2X32AHE4 Tags

-
CYPD3175-24LQXQ
Infineon Technologies

-
SLB9672VU20FW1523XTMA1
Infineon Technologies

-
SLB9670VQ20FW785XTMA1
Infineon Technologies

-
SLB9672XU20FW1523XTMA1
Infineon Technologies

-
SLB9673XU20FW2613XTMA1
Infineon Technologies

-
CYPD3125-40LQXIT
Infineon Technologies

-
AT97SC3204-U2A1A-20
Microchip Technology

-
AT97SC3204-U2A1A-10
Microchip Technology

-
SLM9670AQ20FW1311XTMA1
Infineon Technologies

-
SLB9672XU20FW1613XTMA1
Infineon Technologies

-
SLB9672AU20FW1613XTMA1
Infineon Technologies

-
SLB9673AU20FW2613XTMA1
Infineon Technologies
Tech Hub
A practical engineering guide to 3.3V and 5V logic compatibility, input thresholds, resistor dividers, translator ICs, MOSFET level shifting, I2C pull-ups, timing limits and power-sequencing risks.
The 74HC595 uses push-pull logic outputs, while the TPIC6B595 uses 50 V open-drain DMOS sinks for higher-power loads. This guide compares timing, current limits, 3.3 V interfacing, load wiring, thermal…
The 74HC595 converts serial data into eight stable parallel outputs. This guide covers pin functions, shift and storage timing, OE and MR behavior, drive-current limits, cascading, voltage compatibilit…
A technical comparison of level-sensitive latches and edge-triggered flip-flops, covering timing windows, setup and hold limits, master–slave operation, time borrowing, race-through, HDL inference and…
A D latch stores one bit while Enable controls when data can pass. This reference covers gate-level operation, truth tables, transparency, setup and hold timing, LE versus OE, common ICs and practical …
An SR latch stores one bit through cross-coupled feedback. This engineering reference covers NOR and NAND implementations, truth tables, forbidden-state recovery, gated operation, switch debouncing, fa…
Latch circuits retain one bit through feedback. This technical reference covers SR and D latches, truth tables, transparency, timing limits, latch-versus-flip-flop behavior, applications and common log…
An engineering guide to LED driver operation, constant-current and constant-voltage outputs, linear and switching topologies, dimming, IC selection, calculations, replacement compatibility, and fault c…
Operational amplifier guide covering op amp basics, feedback, ideal vs real op amps, common configurations, buffer circuits, offset, bias current, gain-bandwidth, slew rate, rail-to-rail limits and sel…
Jumper cables guide covering safe connection order, red and black clamp placement, final ground connection, cable gauge, length, clamp quality, copper vs CCA cables, jump starter comparison and battery…
