EmSPARK Security Suite for Microchip is a software security solution designed for IoT device OEMs building products on Microchip's SAMA5D2 and SAMA5D27-SOM1 hardware platforms. It leverages the ARM TrustZone-based secure enclave of the SAMA5D2 MPU to establish a hardware root-of-trust and layered security framework for embedded Linux devices. The suite provides the following core capabilities: Trusted Device Identity: Assigns each device a unique hardware-bound ID that cannot be spoofed, enabling reliable device authentication throughout its lifecycle. Encrypted Boot Chain: Extends the hardware's secure boot capabilities from the initial ROM boot through to the deployment of an authenticated Linux OS and device firmware, protecting against firmware theft and malware compromise. Key & Certificate Management: Manages public-private key pairs and certificates within a TrustZone-isolated keystore, supporting mutual authentication and secure IoT cloud connectivity. Firmware Authentication & Secure OTA Updates: Authenticates firmware integrity and supports secure over-the-air (OTA) firmware updates with failover protection. Secure Device Provisioning: Enables secure manufacturing by injecting keys and certificates at production time, preventing unauthorized device manufacturing by contract manufacturers. Supports both in-system and high-volume production provisioning. Developer APIs: Provides APIs for certificate management, secure storage, secure firmware updates, and secure payload verification, abstracting hardware security complexity from application developers. The suite includes firmware packaging tools with scripts and applets to initialize the encrypted boot process, establish the CoreTEE (Trusted Execution Environment), and deploy authenticated Linux images.