NXP Semiconductors A71CL User manual

AN11803
A71CL Quick start guide for A71CLARD-ALI and Kinetis
Rev. 1.0 — 11 December 2018 Application note
353410 COMPANY PUBLIC
Document information
Information Content
Keywords Security IC, A71CL, A71CLARD-ALI, FRDM-K64F
Abstract This document helps getting started with A71CL-ARDALI and the FRDM-
K64F development platforms for K64 MCUs.

NXP Semiconductors AN11803
A71CL Quick start guide for A71CLARD-ALI and Kinetis
AN11803 All information provided in this document is subject to legal disclaimers. © NXP B.V. 2018. All rights reserved.
Application note Rev. 1.0 — 11 December 2018
COMPANY PUBLIC 353410 2 / 31
Revision history
Rev Date Description
1.0 20181211 First release

NXP Semiconductors AN11803
A71CL Quick start guide for A71CLARD-ALI and Kinetis
AN11803 All information provided in this document is subject to legal disclaimers. © NXP B.V. 2018. All rights reserved.
Application note Rev. 1.0 — 11 December 2018
COMPANY PUBLIC 353410 3 / 31
1 Introduction
This document explains how to get started with the A71CLARD-ALI development kit and
the FRDM-K64F development platforms for K64 MCUs. This guide provides an overview
of the hardware used, followed by detailed instructions for setting up the software
development environment. Finally, it describes how to run ID2 testsuite using FRDM-
K64F acting as the platform host MCU

NXP Semiconductors AN11803
A71CL Quick start guide for A71CLARD-ALI and Kinetis
AN11803 All information provided in this document is subject to legal disclaimers. © NXP B.V. 2018. All rights reserved.
Application note Rev. 1.0 — 11 December 2018
COMPANY PUBLIC 353410 4 / 31
2 A71CL Overview
The A71CL-ALI is a ready-to-use solution, enabling ease-of-use security for ID2-IoT
device makers to connect to Alibaba Cloud. It is a secure element capable of securely
storing and provisioning credentials and is already pre-provisioned with Alibaba ID2
credentials. It is based on A71 secure element hardware which runs an ID2 application
which manages the ID2 credentials.
The A71CL-ALI solution provides basic security measures protecting the IC against
many physical and logical attacks. It can be integrated with various host platforms and
operating systems to secure a broad range of applications.

NXP Semiconductors AN11803
A71CL Quick start guide for A71CLARD-ALI and Kinetis
AN11803 All information provided in this document is subject to legal disclaimers. © NXP B.V. 2018. All rights reserved.
Application note Rev. 1.0 — 11 December 2018
COMPANY PUBLIC 353410 5 / 31
3 System description
The A71CL evaluation setup presented in this document consists of an A71CL security
IC connected to the FRDM-K64F, FRDM-K82F or FRDM-KW41Z development platforms
through the A71CLARD-ALI Arduino compatible kit.
Figure 1. System architecture diagram
This getting-started guide is divided in three parts:
• Hardware overview and setup: It describes the FRDM-K64F development platform
and the A71CL Arduino compatible kit (A71CLARD-ALI) as well as how to mount them
together.
• Software setup: It describes how to configure the development environment and how
to import the required software packages.
• A71CL application examples execution: It describes how to run the A71CL
application examples contained in the A71CL-Ali Host software package.
Note: From now on, the term ‘Kinetis board’ will be used in this guide to avoid
redundancy and to improve readability. ‘Kinetis board’ refers to the FRDM-K64F.

NXP Semiconductors AN11803
A71CL Quick start guide for A71CLARD-ALI and Kinetis
AN11803 All information provided in this document is subject to legal disclaimers. © NXP B.V. 2018. All rights reserved.
Application note Rev. 1.0 — 11 December 2018
COMPANY PUBLIC 353410 6 / 31
4 Hardware overview
This setup uses a Kinetis board as a host MCU while the A71CL security IC acts as the
secure element. The following two boards are needed:
Table 1. Needed Boards
Item Type / 12NC Content
Arduino
Development Kit
A71CLARD-ALI
9353 763 88598
(only available
through NXP
sales contact)
Arduino Adapter Board +
MiniPCB containing a A71CL
secure element IC pre-
provisioned for Alibaba Cloud:
A7101CLTK2/T0BC2WE, 12NC:
9353 687 39118
MCU-Board FRDM-K64F
9353 262 93598
K64F Freedom MCU-
Development board
4.1 A71CL Arduino compatible development kit (A71CLARD)
The A71CLARD is an Arduino development kit containing two items as well as:
1. An A71CL Mini PCB board
2. An Arduino interface board, allowing the user to connect the A71CL to any host
featuring an Arduino compatible header (e.g., many LPC, Kinetis and i.MX boards in
the industry).
4.1.1 A71 Mini PCB board
The Mini PCB board is a small PCB containing the A71 solution and a set of jumpers for
the I2C host interface selection.
Figure 2 shows an image of the MiniPCB. It features two connectors that can be used
depending on the communication interface employed. The figure shows the jumpers
configuration that enables the use of the A71 I2C interface.
Figure 2. System architecture diagram
To enable the I2C communication protocol, it is necessary to configure JP5/6 according
to Table 2. JP2 connects the A71 to the on-board 3.3V voltage regulator on the MiniPCB
board. The jumpers JP3 and JP4 enable the I²C SDA/SCL pull-up resistors. JP7 can be
used to connect the A71 reset signal.

NXP Semiconductors AN11803
A71CL Quick start guide for A71CLARD-ALI and Kinetis
AN11803 All information provided in this document is subject to legal disclaimers. © NXP B.V. 2018. All rights reserved.
Application note Rev. 1.0 — 11 December 2018
COMPANY PUBLIC 353410 7 / 31
Table 2. Default MiniPCB Jumper settings
Jumper Setting Usage
JP1 Not set External VCC connection
JP2 3-4 Connect A71 to 3.3V regulator on MiniPCB
JP3 Set Connect I²C SDA pull-up resistor
JP4 Set Connect I²C SCL pull-up resistor
1-2 Use I²C address 0x92/0x93JP5
2-3 (Default) Use I²C address 0x90/0x91
JP6 1-2 Activate I²C interface
Not set (Default) A71 operatesJP7
Set A71 IC reset
The board schematic and layout are shown in Figure 3 and Figure 4
Figure 3. A71 Mini PCB board schematic

NXP Semiconductors AN11803
A71CL Quick start guide for A71CLARD-ALI and Kinetis
AN11803 All information provided in this document is subject to legal disclaimers. © NXP B.V. 2018. All rights reserved.
Application note Rev. 1.0 — 11 December 2018
COMPANY PUBLIC 353410 8 / 31
Figure 4. Mini PCB board silkscreen with default jumper positions marked black
4.1.2 Arduino interface board
The Arduino header board permits the user to interface the A71 Mini PCB with the Kinetis
board. Section 4.1.2 shows the board pinout.
Connection from the perspective of a matching Arduino Shield (top view)
Figure 5. A71 Arduino header
4.2 Freedom development platforms for Kinetis
The section details the Freedom development platforms for Kinetis supported by the
A71CL product support package.
4.2.1 FRDM-K64F
The Kinetis FRDM-K64F [6] development platform is a simple, yet sophisticated design,
featuring a Kinetis K64 series microcontroller, built on the ARM® Cortex®-M4 core. The
FRDM-K64F can be used to evaluate the K64, K63, and K24 Kinetis K series devices. It
features the MK64FN1M0VLL12 MCU, which boasts the maximum operation frequency
of 120 MHz, 1 MB of flash, 256 KB RAM, a full-speed USB controller, Ethernet controller,
secure digital host controller, and analog and digital peripherals.
The FRDM-K64F hardware is form-factor compatible with the Arduino R3 pin layout,
providing a broad range of expansion board options. The onboard interface includes
a six-axis digital accelerometer & magnetometer, RGB LED, SDHC, add-on Bluetooth

NXP Semiconductors AN11803
A71CL Quick start guide for A71CLARD-ALI and Kinetis
AN11803 All information provided in this document is subject to legal disclaimers. © NXP B.V. 2018. All rights reserved.
Application note Rev. 1.0 — 11 December 2018
COMPANY PUBLIC 353410 9 / 31
module, add-on RF module, Ethernet and OpenSDAv2, the NXP open-source hardware
embedded serial and debug adapter running an open-source bootloader.
Figure 6. FRDM-K64F Freedom development platform for Kinetis K64, K63 and K24 MCUs

NXP Semiconductors AN11803
A71CL Quick start guide for A71CLARD-ALI and Kinetis
AN11803 All information provided in this document is subject to legal disclaimers. © NXP B.V. 2018. All rights reserved.
Application note Rev. 1.0 — 11 December 2018
COMPANY PUBLIC 353410 10 / 31
5 Hardware setup
The hardware setup consists of mounting the different boards together.
First, plug the A71 Mini PCB board to the I2C plug of the Arduino interface board.
Figure 7. A71 Arduino kit mounted on Kinetis FRDM-K64F board
Second, plug the A71CL into the Kinetis board using the Arduino adaptors. The Arduino
shield board comes with male connectors below and female connectors on top.
Figure 8. Arduino interface board connected to the Kinetis board (FRDM-K64F)
Then, the A71 security IC is connected to the Kinetis board through the Arduino interface
board. See Figure 9

NXP Semiconductors AN11803
A71CL Quick start guide for A71CLARD-ALI and Kinetis
AN11803 All information provided in this document is subject to legal disclaimers. © NXP B.V. 2018. All rights reserved.
Application note Rev. 1.0 — 11 December 2018
COMPANY PUBLIC 353410 11 / 31
Figure 9. Arduino interface board connected to the Kinetis board (FRDM-K64F)
As can be observed, there are two USB connectors in the Kinetis boards FRDM-K64F.
See Figure 10. The USB connector highlighted in red corresponds to OpenSDA debug
port. This port will be used by the development PC to flash and debug the A71 examples
over an on-board debugger into the Kinetis MCU as well as to have a serial console.
The USB connector highlighted in yellow is directly connected to the K64F MCU and
functionality depends on the example programmed into the MCU.
Figure 10. Red USB indicates OpenSDA debug port. Yellow USB indicates K64F port
(FRDM-K64F)

NXP Semiconductors AN11803
A71CL Quick start guide for A71CLARD-ALI and Kinetis
AN11803 All information provided in this document is subject to legal disclaimers. © NXP B.V. 2018. All rights reserved.
Application note Rev. 1.0 — 11 December 2018
COMPANY PUBLIC 353410 12 / 31
6 Software setup
This section details the required steps to complete the software setup for A71 security IC
and FRDM-K64F Freedom development platforms. The following items are needed:
•MCUxpresso IDE, see section 6.1. Here we use version 10.2.
•Kinetis SDK for MCUxpresso, see section 6.2. Here we use version 2.4.
•Hostlibrary code examples, see section 6.3.
•Serial terminal application, see section 6.5.
•OpenSDA debugger firmware update on Kinetis board, see section 6.6.
6.1 MCUXpresso IDE installation
MCUXpresso IDE is a fully featured software development environment for NXP’s ARM-
based MCUs, and includes all the tools necessary to develop high-quality embedded
software applications in a timely and cost-effective fashion.
MCUXpresso IDE is based on the Eclipse IDE and includes the industry standard ARM
GNU toolchain. It brings developers an easy-to-use and unlimited code size development
environment for NXP MCUs based on Cortex-M cores (LPC, Kinetis and i.MX RT). The
IDE combines the best of the widely popular LPCXpresso and Kinetis Design Studio
IDEs, providing a common platform for all NXP Cortex-M microcontrollers.
MCUXpresso IDE is a free toolchain providing developers with no restrictions on code
or debug sizes. It provides an intuitive and powerful interface with profiling, power
measurement on supported boards, GNU tool integration and library, multicore capable
debugger, trace functionality and more. MCUXpresso IDE debug connections support
Freedom, Tower, EVK, LPCXpresso and custom development boards with industry
leading open-source and commercial debug probes including LPC-Link2, P&E and
SEGGER.
The fully featured debugger supports both SWD and JTAG debugging, and features
direct download to on-chip and external flash memory.
The installation file of MCUXpresso can be found in [3]. The setup wizard will guide
the user through the process of installing MCUXpresso correctly. Since MCUXpresso
requires extra drivers during the installation, check all the items on the list to allow the
drivers to be installed. Make sure the checkbox for installing the NXP debug drivers is
activated. See Figure 11.
Note: Please, install MCUXpresso IDE version 10.2.0 or higher

NXP Semiconductors AN11803
A71CL Quick start guide for A71CLARD-ALI and Kinetis
AN11803 All information provided in this document is subject to legal disclaimers. © NXP B.V. 2018. All rights reserved.
Application note Rev. 1.0 — 11 December 2018
COMPANY PUBLIC 353410 13 / 31
Figure 11. MCUXpresso install wizard
6.2 Kinetis SDK package
To generate and download your customized SDK for your Kinetis FRDM board, you
can enter the MCUXpesso SDKBuilder website [5] with the button “Select Development
Board” and follow these steps:
1. Select your Kinetis FRDM board and click on ‘Build MCUXpresso SDK’; in this case
the selected board is the FRDM-K64F. See Figure 12.
Figure 12. Kinetis board selection

NXP Semiconductors AN11803
A71CL Quick start guide for A71CLARD-ALI and Kinetis
AN11803 All information provided in this document is subject to legal disclaimers. © NXP B.V. 2018. All rights reserved.
Application note Rev. 1.0 — 11 December 2018
COMPANY PUBLIC 353410 14 / 31
1. In the next screen, select the software components, for this example no special items
need to be selected and you can skip this step (see Figure 13) and directly click on
‘Download SDK’.
Figure 13. Kinetis SDK configuration
The downloaded SDK has to be imported in MCUXpresso IDE. To import the SDK into
MCUXpresso IDE, drag and drop the SDK file inside the red square (‘Installed SDKs’)
and then click ‘OK’ to confirm the operation. See Figure 14.
Figure 14. Installing the downloaded Kinetis SDK into MCUXpresso
6.3 Installing the A71CL example project
After downloading the A71CL host library [A71CL_HOST_SW] [1] follow these steps for
installation:
1. Double click on the downloaded A71CL executable A71CL hostlibrary file.
2. Click ‘Yes’ If pop up comes saying “Do you want to allow this app from an unknown
publisher to make changes to your device ?”.
3. Read License agreement and accept the license agreement by checking(✔) “I accept
the terms of the License Agreement”, then click next.

NXP Semiconductors AN11803
A71CL Quick start guide for A71CLARD-ALI and Kinetis
AN11803 All information provided in this document is subject to legal disclaimers. © NXP B.V. 2018. All rights reserved.
Application note Rev. 1.0 — 11 December 2018
COMPANY PUBLIC 353410 15 / 31
Figure 15. A71CL Hostlibrary License
1. Choose destination folder and click next.
Figure 16. Select install folder
1. Choose start menu folder and click Install.

NXP Semiconductors AN11803
A71CL Quick start guide for A71CLARD-ALI and Kinetis
AN11803 All information provided in this document is subject to legal disclaimers. © NXP B.V. 2018. All rights reserved.
Application note Rev. 1.0 — 11 December 2018
COMPANY PUBLIC 353410 16 / 31
Figure 17. Select start menu entry
1. Click Close After Installation Complete.
Figure 18. Installation finished
6.4 Importing the example projects in MCUXpresso IDE
There are generally two possible ways to import the A71 project examples in
MCUXpresso IDE, depending if we are using the MCUXpresso project files bundled with
the A71CL Host Software package or if the installed SDK package already contains the
A71CL middleware:

NXP Semiconductors AN11803
A71CL Quick start guide for A71CLARD-ALI and Kinetis
AN11803 All information provided in this document is subject to legal disclaimers. © NXP B.V. 2018. All rights reserved.
Application note Rev. 1.0 — 11 December 2018
COMPANY PUBLIC 353410 17 / 31
•Importing the A71CL-ALI example projects from the installed Kinetis-SDK. This SDK is
not available yet and as such this way is not supported yet.
•Importing the A71CL example projects from local drive (included in the A71CL-ALI Host
Library).
6.4.1 Importing A71CL example projects from local drive
Here the project files bundled with the A71CL Host Software package can be used.
The A71CL Host Software Package can be downloaded from [A71CL_HOST_SW
A71CH_HOST_SW] [1].
After unpacking the package the example project files are in the subfolder
‘mcux_projects_frdmk64f’ in the case of the FRDM K64F board. It contains one example
project:
•frdmk64f_id2_client_sdk: demonstrate the connection of the id2_client_sdk as available
on Github [ https://github.com/alibaba/id2_client_sdk ] to the A71CL and run the
testsuite
To import a project from file system, click on ‘Import project(s) from file system…’ in the
‘Quick start Panel’ located in the bottom left. See Figure 19.
Figure 19. Import project from file system
After clicking the import option, a new pop-up will open. In the ‘Project directory
(unpacked)’ field, browse and point to the correct project directory, see Figure 20. Then,
click on ‘Next’.

NXP Semiconductors AN11803
A71CL Quick start guide for A71CLARD-ALI and Kinetis
AN11803 All information provided in this document is subject to legal disclaimers. © NXP B.V. 2018. All rights reserved.
Application note Rev. 1.0 — 11 December 2018
COMPANY PUBLIC 353410 18 / 31
Figure 20. Project directory to import
Finally, select all the available example projects, deselect “Copy projects into the
workspace” and then click on ‘Finish’. In case you want to have the same project
imported multiple times independently you need to unpack it into distinct directories and
import these individually as the code needs to get referenced instead of copied.
Figure 21. Project directory to import
6.5 Terminal setup
A terminal application must be executed from the development PC to interact with the
Kinetis board. Any terminal supporting a serial port interface can be used.
In this document, Tera Term is used and can be downloaded from [2]. The setup wizard
will guide the user through the installation. The standard installation can be chosen for
this purpose. Once it is finished, Tera Term can be started.

NXP Semiconductors AN11803
A71CL Quick start guide for A71CLARD-ALI and Kinetis
AN11803 All information provided in this document is subject to legal disclaimers. © NXP B.V. 2018. All rights reserved.
Application note Rev. 1.0 — 11 December 2018
COMPANY PUBLIC 353410 19 / 31
6.6 OpenSDA configuration
OpenSDA is a serial and debug adapter built into the Kinetis board. It provides a bridge
between the development PC and the Kinetis MCU, which can be used for debugging,
flash programming and serial communication all over USB.
Note: This section explains how to install the correct OpenSDA bootloader firmware
version to the Kinetis FRDM-K64F board. This needs to be done for debugging, flash
programming, and serial communication over a single USB connection between a host
and an embedded target processor. If this section is not followed carefully, it is possible
the examples will not be executed.
To configure OpenSDA into the Kinetis FRDM board, an OpenSDA bootloader (.bin
file) should be downloaded from OpenSDA website [4]. Scroll down the page to section
‘Compatible Evaluation Boards’ and search for the target Kinetis FRDM board. In this
case, Figure 22 depicts the OpenSDA bootloader version defined for the Kinetis FRDM
K64F: version 2.0.
Figure 22. OpenSDA bootloader version for the Kinetis FRDM-K64F
Once the OpenSDA bootloader version is identified, click in the ‘Downloads’, scroll down
until ‘J-Link OpenSDA – Generic Firmwares’ appears and download the desired version.
Figure 23 illustrates the process; in this case OpenSDA V2 Bootloader has been
selected, according to the compatible evaluation boards table previously mentioned.
Figure 23. Desired firmware for the Kinetis FRDM-K64F

NXP Semiconductors AN11803
A71CL Quick start guide for A71CLARD-ALI and Kinetis
AN11803 All information provided in this document is subject to legal disclaimers. © NXP B.V. 2018. All rights reserved.
Application note Rev. 1.0 — 11 December 2018
COMPANY PUBLIC 353410 20 / 31
To write the downloaded firmware into the Kinetis FRDM board, the bootloader mode
should be enabled. For this, press ‘Reset’ button and, while holding down the button,
connect a USB cable to the debugger port of the Kinetis board (e.g., FRDM K64,
Figure 24).
Figure 24. Enabling bootloader mode
After connecting the USB cable to the Kinetis board, the green led located inside the
yellow square will start blinking and the development PC will show a new drive called
‘BOOTLOADER’. The drive may disappear again after ~30 seconds in case there is no
interaction, in this case disconnect and connect again with pressing the ‘Reset’ button.
Drag the downloaded firmware directly into the drive, see Figure 25. Once the file is
copied inside the ‘BOOTLOADER’ drive the LED will soon start blink fast, then unplug the
Kinetis board and plug it again. The green led stays on, thus indicating that the OpenSDA
bootloader firmware has been configured correctly.
Figure 25. Copying the firmware into the Kinetis board in ‘BOOTLOADER’ mode