STMicroelectronics STM32HSM-V2AE

Overview

STM32HSM-V2AE from STMicroelectronics is a hardware security module (HSM) designed to enforce secure firmware installation (SFI) on STM32 microcontrollers during contract manufacturing. It implements a tamper-resistant, one-time-programmable secure counter (max 25 operations), stores ST public keys and customer-defined firmware encryption keys, and integrates directly with STM32CubeProgrammer and STM32 Trusted Package Creator for trusted package generation.

For engineers reviewing the STM32HSM-V2AE datasheet, STM32HSM-V2AE pinout, STM32HSM-V2AE application, or STM32HSM-V2AE equivalent, key selection criteria include secure counter limit (25 SFI operations), ST public key management capability, firmware encryption key storage, SFI workflow integration with STM32CubeProg, and OEM-controlled deactivation after authorized use.

Technical Context

The STM32HSM-V2AE operates as an external cryptographic enforcement node in the secure firmware provisioning chain. It performs authenticated key loading (ST public keys + customer encryption keys), validates firmware package integrity via signature verification, and enforces strict usage limits through its irreversible 25-operation counter.

Its architecture relies on internal secure non-volatile memory for key storage and counter state retention, and it communicates exclusively via USB interface with STM32CubeProgrammer - no standalone serial or JTAG interface is supported. The device does not execute firmware or host applications; it functions solely as a policy-enforcing hardware token.

Key Specifications

Availability

STM32HSM-V2AE is available at Aetrix Electronics and suitable for high-assurance firmware provisioning, contract manufacturing anti-counterfeiting programs, and OEM-controlled secure bootloader deployment requiring stable component supply and traceable lifecycle management.

Supply support for STM32HSM-V2AE includes scheduled delivery planning, volume procurement assistance, BOM continuity management, traceable sourcing, and lifecycle availability coordination for OEM customers, industrial embedded developers, connected-device designers, and electronics production programs.

Manufacturer

STMicroelectronics is a global semiconductor leader headquartered in Geneva, Switzerland, specializing in microcontrollers, analog ICs, power management, and secure embedded solutions.

The STM32HSM-V2 series belongs to ST's Secure Provisioning product line, engineered specifically to prevent firmware cloning and unauthorized programming in outsourced manufacturing environments.

FAQ

What is the primary function of the STM32HSM-V2AE in the STM32 secure provisioning workflow?

The STM32HSM-V2AE serves as a physical enforcement token that binds OEM-defined firmware encryption keys and ST public keys to a fixed count of 25 Secure Firmware Install (SFI) operations. It is used exclusively by contract manufacturers to load encrypted firmware onto STM32 devices equipped with a secure bootloader, and permanently disables after the counter reaches zero - preventing reuse or over-provisioning.

Can the STM32HSM-V2AE be reprogrammed or reset after reaching its 25-operation limit?

No. The 25-operation counter in the STM32HSM-V2AE is implemented in tamper-resistant secure non-volatile memory and is irreversible. Once decremented to zero, the device enters permanent deactivation mode and cannot be reinitialized, reprogrammed, or reused for any SFI operation - this is a deliberate hardware-enforced security feature per DB4265 Rev 5.

Which software tools are required to configure and use the STM32HSM-V2AE?

Configuration and operation require STM32CubeProgrammer v2.14 or later and the integrated STM32 Trusted Package Creator tool - both downloadable only from st.com. These tools handle ST public key loading, customer encryption key import, secure counter initialization, and trusted firmware package generation; no third-party or open-source alternatives are supported.

Does the STM32HSM-V2AE support multiple STM32 families or only specific MCUs?

The STM32HSM-V2AE supports all STM32 microcontrollers with a compatible secure bootloader implementing the Secure Firmware Install (SFI) protocol defined in Application Note AN4992 - including STM32L4+, L5, U5, H5, and WB series. Compatibility is determined by bootloader version and SFI command set, not by HSM hardware revision.