Robust update schema backed by secure silicon.

• Keep devices current with frequent operational and security updates.
• A/B filesystems are cryptographically isolated, including boot artifacts.
• Updates are supervised by an independent security controller. 
• Roll back to a stable filesystem in case of failed or compromised updates.

Protects your data, IP and credentials from unauthorized access. 

• Data and kernel are encrypted with keys managed in the HSM.
• Keys are scrubbed upon device penetration to prevent access to data.
• Works seamlessly with A/B updates.

MInimze operational downtime when A/B updates occasionally but inevitably fail.

Loss of network access, loss of power and incorrect signatures, are a few common failure modes. When updates fail it is essential that a device has the possibility to recover to some trusted operational state, and preferably without human intervention, remote or local.  

Bootware supports three levels of trusted recovery. 

• Failed update of Image-A > revert to Image-B.
• Failed Image-B > revert to Safe Recovery mode.
• Failed Safe > revert to user intervention.

Ensures that all update images come from a known and verified source, and have not been tampered with. 

• Only devices with the correct HSM keys will be able to authenticate the source and pull these secure updates.

Reduces the risk of exposing cryptographic keys through physical access and sideband attacks. 

• Cryptographic keys are created, managed and stored in a special purpose secure element with grid protection. 
• Logical and physical access is restricted through multiple layers of cryptography, hardware and tamper sensors. 

Reduce the risk of compromised boot chains and bricked devices.

• Zymbit S2, S3 level devices use an independent security controller to supervise the boot process. 
• Boot artifacts are individually verified for integrity and authenticity against a user defined manifest. 
• Security policies can be put in place to prevent failed and compromised updates.

Develop and deploy using popular Ubuntu and Raspberry Pi OS tools.

• Push secure updates to systems with Debian based OS.
• Support for custom kernel builds.
• Switch between Bullseye and Ubuntu 22.04 during development.

Bootware services are available on a wide range of Zymbit professional components.

• Secure Compute
• Secure Edge Node 
• Secure Carrier Board
• (Security Modules V1.1)
• See details for supported features.