ContentWise EdgeAI 2 and EdgeAI 3 are Linux-based single-board computers (SBCs) designed for edge AI deployments, integrating the TROPIC01 secure element as a hardware root of trust. These passively-cooled platforms are built on OpenWRT Linux and target use cases such as physical access control systems, edge AI cameras, and smart home gateways. Security Architecture: - ARM Secure Boot validates a cryptographically signed bootloader at startup - The bootloader establishes a secure session with TROPIC01 using the Noise protocol and validates kernel signatures using keys stored in the chip - A custom kernel module maintains continuous communication with TROPIC01 at runtime, verifying application signatures and system checksums - If integrity checks fail, the kernel module terminates processes or initiates a system shutdown Hardware Root of Trust (TROPIC01): - Device identity is derived from a Physical Unclonable Function (PUF), making it non-clonable - Remote systems can verify device authenticity before establishing trusted sessions - Multiple EdgeAI boards can mutually attest to each other, detecting OS or application tampering across distributed deployments Key Security Capabilities: - Cryptographically signed AI inference outputs, binding results to verified device identity and firmware state - Hardware sensors detect physical attacks including voltage glitching, laser probing, and electromagnetic interference; the chip locks down upon detection - OTA firmware updates require cryptographic signatures; monotonic counters prevent firmware rollback attacks Deployment: - Used in production in ContentWise wiseACS (physical access control), edge AI cameras, and smart home gateways