Security tools

To build secure software on Qualcomm devices using TrustZone and secure boot, the key tools needed are SecTools v2 and LLVM compiler for Arm^®, targeting the Snapdragon^® devices. SecTools v2 is a suite of Qualcomm security tools designed to support secure boot, image authentication, debug policy creation, and fuse programming across Qualcomm system-on-chips (SoCs). The LLVM compiler for Qualcomm^® Trusted Execution Environment (Qualcomm TEE) is a specialized toolchain used to build secure software components for TEE on Qualcomm devices.

​

SecTools v2

1. Go to the SecTools v2 folder. The SecTools executable is located in the following path.

   <Metabuild>/<chipset>.LE.X.x/common/sectoolsv2/ext/<host_machine> This folder has the binaries and scripts required for secure boot, image signing, and other security operations.

2. Locate the security Profile XML.

   The <chipset>.LE.X.x/common/sectoolsv2/<chipset>_security_profile.xml file defines the security configuration used by SecTools.

The minimum SecTools version required is 1.43 or later.

The table lists the documentation for SecTools v2. Table : SecTools v2

​

Next steps

• To initialize and configure the hardware for running securely on Linux, see Verify security configurations.
• To configure Qualcomm TEE for securing devices that handle sensitive data and run trusted applications, see Configure security services.