NXP Semiconductors A71CLARD-BA User manual

AN12306
A71CL Quick start guide for A71CLARD-BAI and Kinetis
Rev. 1.0 — 14 December 2018
515910
Application note
COMPANY PUBLIC
Document information
Info
Content
Keywords
Security IC, A71CL, A71CLARD-BAI, FRDM-K64F
Abstract
This document helps getting started with A71CLARD-BAI and the FRDM-
K64F development platforms for K64 MCUs.

NXP Semiconductors
AN12306
A71CL Quick start guide for A71CLARD-BAI and Kinetis
515910
All information provided in this document is subject to legal disclaimers.
© NXP B.V. 2018. All rights reserved.
Application note
COMPANY PUBLIC
Rev. 1.0 — 14 December 2018
515910
2 of 32
Contact information
For more information, please visit:
http://www.nxp.com
Revision history
Rev
Date
Description
1.0
20181214
First release

NXP Semiconductors
AN12306
A71CL Quick start guide for A71CLARD-BAI and Kinetis
515910
All information provided in this document is subject to legal disclaimers.
© NXP B.V. 2018. All rights reserved.
Application note
COMPANY PUBLIC
Rev. 1.0 — 14 December 2018
515910
3 of 32
Introduction
This document explains how to get started with the A71CLARD-BAI development kit and
the FRDM-K64F development platforms for K64 MCUs. This guide provides an overview
of the hardware used, followed by detailed instructions for setting up the software
development environment. Finally, it describes how to run an MCU example doing crypto
on the secure element using FRDM-K64F acting as the platform host MCU.
A71CL Overview
The A71CL-BAI is a ready-to-use solution, enabling ease-of-use security for IoT device
makers to connect to Baidu Cloud. It is a secure element capable of securely storing and
provisioning credentials and is already pre-provisioned with Baidu credentials. It is based
on A71 secure element hardware which runs an application which manages the
credentials.
The A71CL-BAI solution provides basic security measures protecting the IC against
many physical and logical attacks. It can be integrated with various host platforms and
operating systems to secure a broad range of applications.
System description
The A71CL evaluation setup presented in this document consists of an A71CL security
IC connected to the FRDM-K64F development platform through the A71CLARD-BAI
Arduino compatible kit.
Fig 1. System architecture diagram
This getting-started guide is divided in three parts:
•Hardware overview and setup: It describes the FRDM-K64F development platform
and the A71CL Arduino compatible kit (A71CLARD-BAI) as well as how to mount
them together.
•Software setup: It describes how to configure the development environment and
how to import the required software packages.
•A71CL application examples execution: It describes how to run the A71CL
application examples contained in the A71CL-Baidu Host software package.
aaa-032573
development PC kinetis board
HOST MCU
A71CLARD-ALI
I
2
C
ARDUINO
INTERFACE
BOARD
A71CL-
ALI
USB I 2
C

NXP Semiconductors
AN12306
A71CL Quick start guide for A71CLARD-BAI and Kinetis
515910
All information provided in this document is subject to legal disclaimers.
© NXP B.V. 2018. All rights reserved.
Application note
COMPANY PUBLIC
Rev. 1.0 — 14 December 2018
515910
4 of 32
Note: From now on, the term ‘Kinetis board’ will be used in this guide to avoid
redundancy and to improve readability. ‘Kinetis board’ refers to the FRDM-K64F.
Hardware overview
This setup uses a Kinetis board as a host MCU while the A71CL security IC acts as the
secure element. The following two boards are needed:
Table 1. Needed Boards
Item
Type / 12NC
Content
Arduino
Development Kit
A71CLARD-BAI
9353 763 89598
(only available
through NXP
sales contact)
Arduino Adapter Board +
MiniPCB containing a A71CL
secure element IC pre-
provisioned for Baidu Cloud:
A7101CLTK2/T0BC27F,
12NC: 9353 725 76118
MCU-Board
FRDM-K64F
9353 262 93598
K64F Freedom MCU-
Development board
4.1 A71CL Arduino compatible development kit (A71CLARD)
The A71CLARD is an Arduino development kit containing two items as well as:
1. An A71CL Mini PCB board
2. An Arduino interface board, allowing the user to connect the A71CL to any host
featuring an Arduino compatible header (e.g., many LPC, Kinetis and i.MX boards in
the industry).
4.1.1 A71 Mini PCB board
The Mini PCB board is a small PCB containing the A71 solution and a set of jumpers for
the I2C host interface selection.
Fig 2 shows an image of the MiniPCB. It features two connectors that can be used
depending on the communication interface employed. The figure shows the jumpers
configuration that enables the use of the A71 I2C interface.

NXP Semiconductors
AN12306
A71CL Quick start guide for A71CLARD-BAI and Kinetis
515910
All information provided in this document is subject to legal disclaimers.
© NXP B.V. 2018. All rights reserved.
Application note
COMPANY PUBLIC
Rev. 1.0 — 14 December 2018
515910
5 of 32
Fig 2. A71 mini PCB
To enable the I2C communication protocol, it is necessary to configure JP5/6 according
to Table 2. JP2 connects the A71 to the on-board 3.3V voltage regulator on the MiniPCB
board. The jumpers JP3 and JP4 enable the I²C SDA/SCL pull-up resistors. JP7 can be
used to connect the A71 reset signal.
Table 2. Default MiniPCB Jumper settings
Jumper
Setting
Usage
JP1
Not set
External VCC connection
JP2
3-4
Connect A71 to 3.3V regulator on MiniPCB
JP3
Set
Connect I²C SDA pull-up resistor
JP4
Set
Connect I²C SCL pull-up resistor
JP5
1-2
Use I²C address 0x92/0x93
2-3 (Default)
Use I²C address 0x90/0x91
JP6
1-2
Activate I²C interface
JP7
Not set (Default)
A71 operates
Set
A71 IC reset
The board schematic and layout are shown in Fig 3 and Fig 4.

NXP Semiconductors
AN12306
A71CL Quick start guide for A71CLARD-BAI and Kinetis
515910
All information provided in this document is subject to legal disclaimers.
© NXP B.V. 2018. All rights reserved.
Application note
COMPANY PUBLIC
Rev. 1.0 — 14 December 2018
515910
6 of 32
Fig 3. A71 Mini PCB board schematic
aaa-032574
VSS
C2
100 nF
GND
GND
GND
GND GND
C7
n.c.
100 nF
GND
IC2
nc/A7101 HVSON8_SOT909-1
VCC VCC
n.c.
nRSTSDA
SCL
IF1
IF02
7
4
6
3
5
1
8
VSS
C1
100 nF
R5
100 kΩ
GND GND
IC1
A7101 SO8_SOT96-1
VCC VCC
VCC
n.c.
nRSTSDA
SCL
IF1
IF05
4
2
3
IF0
P2
Molex
38-00-1336
IF1
GND
SCL
1
2
3
4
SDA
5
VCC +5 V
6
SCL
P1
Molex
38-00-1334
VCC +5 V
GND
SDA
1
2
3
4
1
8
6
7
VSS
C4
100 nF
GND
IC4
JP2
VCC select
VCC
VCC_ext
nc/A7101 WLCSP
VCC VCC
n.c.
nRSTSDA
SCL
IF1
IF0
A2
B2
A1 n.c.
B1 n.c.
C1 n.c.
B3
C3
C4
TP C2
B4
A3
A4
IC3
TDA3663
31
2 4
VP REG+5 V+3.3 V
C5
10 µF
GND
GND
GNDGND
C3
100 nF
JS5
VCC
JP5
CLK
GND
C6
10 µF
JS2
5
3
GND
JP1
VCC ext.
GND
JS6
JP6
nSS
JS4
JP4
JS3
JP3
R1
3.3 kΩ
R2
3.3 kΩ
R3
1.0 kΩ
R4
1.0 kΩ
JS7 JP7
1
6
4
2
JS1

NXP Semiconductors
AN12306
A71CL Quick start guide for A71CLARD-BAI and Kinetis
515910
All information provided in this document is subject to legal disclaimers.
© NXP B.V. 2018. All rights reserved.
Application note
COMPANY PUBLIC
Rev. 1.0 — 14 December 2018
515910
7 of 32
Fig 4. A71 Mini PCB board silkscreen with default jumper positions marked black
4.1.2 Arduino interface board
The Arduino header board permits the user to interface the A71 Mini PCB with the
Kinetis board. Fig 5 shows the board pinout.
(1) Connection from the perspective of a matching Arduino Shield (top view)
Fig 5. A71 Arduino header
4.2 Freedom development platforms for Kinetis
The section details the Freedom development platforms for Kinetis supported by the
A71CL product support package.
4.2.1 FRDM-K64F
The Kinetis FRDM-K64F [FRDM_K64F] [6] development platform is a simple, yet
sophisticated design, featuring a Kinetis K64 series microcontroller, built on the ARM®
Cortex®-M4 core. The FRDM-K64F can be used to evaluate the K64, K63, and K24
Kinetis K series devices. It features the MK64FN1M0VLL12 MCU, which boasts the

NXP Semiconductors
AN12306
A71CL Quick start guide for A71CLARD-BAI and Kinetis
515910
All information provided in this document is subject to legal disclaimers.
© NXP B.V. 2018. All rights reserved.
Application note
COMPANY PUBLIC
Rev. 1.0 — 14 December 2018
515910
8 of 32
maximum operation frequency of 120 MHz, 1 MB of flash, 256 KB RAM, a full-speed
USB controller, Ethernet controller, secure digital host controller, and analog and digital
peripherals.
The FRDM-K64F hardware is form-factor compatible with the Arduino R3 pin layout,
providing a broad range of expansion board options. The onboard interface includes a
six-axis digital accelerometer & magnetometer, RGB LED, SDHC, add-on Bluetooth
module, add-on RF module, Ethernet and OpenSDAv2, the NXP open-source hardware
embedded serial and debug adapter running an open-source bootloader.
Fig 6. FRDM-K64F Freedom development platform for Kinetis K64, K63 and K24 MCUs
Hardware setup
The hardware setup consists of mounting the different boards together.
First, plug the A71 Mini PCB board to the I2C plug of the Arduino interface board.
Fig 7. A71 Mini PCB board mounting on the I2C adaptor of the Arduino interface board
Second, plug the A71CL into the Kinetis board using the Arduino adaptors. The Arduino
shield board comes with male connectors below and female connectors on top.

NXP Semiconductors
AN12306
A71CL Quick start guide for A71CLARD-BAI and Kinetis
515910
All information provided in this document is subject to legal disclaimers.
© NXP B.V. 2018. All rights reserved.
Application note
COMPANY PUBLIC
Rev. 1.0 — 14 December 2018
515910
9 of 32
Fig 8. A71 Arduino kit mounted on Kinetis FRDM-K64F board
Then, the A71 security IC is connected to the Kinetis board through the Arduino interface
board. See Fig 9.
Fig 9. Arduino interface board connected to the Kinetis board (FRDM-K64F)
As can be observed, there are two USB connectors in the Kinetis boards FRDM-K64F.
See Fig 10. The USB connector highlighted in red corresponds to OpenSDA debug port.
This port will be used by the development PC to flash and debug the A71 examples over
an on-board debugger into the Kinetis MCU as well as to have a serial console. The USB

NXP Semiconductors
AN12306
A71CL Quick start guide for A71CLARD-BAI and Kinetis
515910
All information provided in this document is subject to legal disclaimers.
© NXP B.V. 2018. All rights reserved.
Application note
COMPANY PUBLIC
Rev. 1.0 — 14 December 2018
515910
10 of 32
connector highlighted in yellow is directly connected to the K64F MCU and functionality
depends on the example programmed into the MCU.
Fig 10. Red USB indicates OpenSDA debug port. Yellow USB indicates K64F port
(FRDM-K64F)
Software setup
This section details the required steps to complete the software setup for A71 security IC
and FRDM-K64F Freedom development platforms. The following items are needed:
•MCUxpresso IDE, see section 6.1. Here we use version 10.2.
•Kinetis SDK for MCUxpresso, see section 6.2. Here we use version 2.4.
•Hostlibrary code examples installation and importing, see sections 6.3 and 6.4.
•Serial terminal application, see section 6.5.
•OpenSDA debugger firmware update on Kinetis board, see section 6.6.
6.1 MCUXpresso IDE installation
MCUXpresso IDE is a fully featured software development environment for NXP’s ARM-
based MCUs, and includes all the tools necessary to develop high-quality embedded
software applications in a timely and cost-effective fashion.
MCUXpresso IDE is based on the Eclipse IDE and includes the industry standard ARM
GNU toolchain. It brings developers an easy-to-use and unlimited code size development
environment for NXP MCUs based on Cortex-M cores (LPC, Kinetis and i.MX RT). The
IDE combines the best of the widely popular LPCXpresso and Kinetis Design Studio
IDEs, providing a common platform for all NXP Cortex-M microcontrollers.
MCUXpresso IDE is a free toolchain providing developers with no restrictions on code or
debug sizes. It provides an intuitive and powerful interface with profiling, power
measurement on supported boards, GNU tool integration and library, multicore capable
debugger, trace functionality and more. MCUXpresso IDE debug connections support
Freedom, Tower, EVK, LPCXpresso and custom development boards with industry

NXP Semiconductors
AN12306
A71CL Quick start guide for A71CLARD-BAI and Kinetis
515910
All information provided in this document is subject to legal disclaimers.
© NXP B.V. 2018. All rights reserved.
Application note
COMPANY PUBLIC
Rev. 1.0 — 14 December 2018
515910
11 of 32
leading open-source and commercial debug probes including LPC-Link2, P&E and
SEGGER.
The fully featured debugger supports both SWD and JTAG debugging, and features
direct download to on-chip and external flash memory
The installation file of MCUXpresso can be found in [MCUXPRESSO_IDE] [3]. The setup
wizard will guide the user through the process of installing MCUXpresso correctly. Since
MCUXpresso requires extra drivers during the installation, check all the items on the list
to allow the drivers to be installed. Make sure the checkbox for installing the NXP debug
drivers is activated. See Fig 11.
Note: Please, install MCUXpresso IDE version 10.2.0 or higher
Fig 11. MCUXpresso install wizard
6.2 Kinetis SDK package
To generate and download your customized SDK for your Kinetis FRDM board, you can
enter the MCUXpesso SDKBuilder website [SDKBuilder] [5] with the button “Select
Development Board” and follow these steps:
1. Select your Kinetis FRDM board and click on ‘Build MCUXpresso SDK’; in this case
the selected board is the FRDM-K64F. See Fig 12.

NXP Semiconductors
AN12306
A71CL Quick start guide for A71CLARD-BAI and Kinetis
515910
All information provided in this document is subject to legal disclaimers.
© NXP B.V. 2018. All rights reserved.
Application note
COMPANY PUBLIC
Rev. 1.0 — 14 December 2018
515910
12 of 32
Fig 12. Kinetis board selection
2. In the next screen, select the software components, for this example no special items
need to be selected and you can skip this step (see Fig 13) and directly click on
‘Download SDK’.
Fig 13. Kinetis SDK configuration
The downloaded SDK has to be imported in MCUXpresso IDE. To import the SDK into
MCUXpresso IDE, drag and drop the SDK file inside the red square (‘Installed SDKs’)
and then click ‘OK’ to confirm the operation. See Fig 14.

NXP Semiconductors
AN12306
A71CL Quick start guide for A71CLARD-BAI and Kinetis
515910
All information provided in this document is subject to legal disclaimers.
© NXP B.V. 2018. All rights reserved.
Application note
COMPANY PUBLIC
Rev. 1.0 — 14 December 2018
515910
13 of 32
Fig 14. Installing the downloaded Kinetis SDK into MCUXpresso
6.3 Installing the A71CL example project
After downloading the A71CL host library [A71CL_HOST_SW] [1] follow these steps for
installation:
1. Double click on the downloaded A71CL executable A71CL hostlibrary file.
2. Click ‘Yes’ If pop up comes saying “Do you want to allow this app from an
unknown publisher to make changes to your device ?”.
3. Read License agreement and accept the license agreement by checking() “I
accept the terms of the License Agreement”, then click next.
Fig 15. A71CL Hostlibrary License
4. Choose destination folder and click next.

NXP Semiconductors
AN12306
A71CL Quick start guide for A71CLARD-BAI and Kinetis
515910
All information provided in this document is subject to legal disclaimers.
© NXP B.V. 2018. All rights reserved.
Application note
COMPANY PUBLIC
Rev. 1.0 — 14 December 2018
515910
14 of 32
Fig 16. Select install folder
5. Choose start menu folder and click Install.
Fig 17. Select start menu entry
6. Click Close After Installation Complete.

NXP Semiconductors
AN12306
A71CL Quick start guide for A71CLARD-BAI and Kinetis
515910
All information provided in this document is subject to legal disclaimers.
© NXP B.V. 2018. All rights reserved.
Application note
COMPANY PUBLIC
Rev. 1.0 — 14 December 2018
515910
15 of 32
Fig 18. Installation finished
6.4 Importing the example projects in MCUXpresso IDE
There are generally two possible ways to import the A71 project examples in
MCUXpresso IDE, depending if we are using the MCUXpresso project files bundled with
the A71CL Host Software package or if the installed SDK package already contains the
A71CL middleware:
•Importing the A71CL example projects from the installed Kinetis-SDK. This SDK is
not available yet and as such this way is not supported yet.
•Importing the A71CL example projects from local drive (included in the A71CL Host
Library).
6.4.1 Importing A71CL example projects from local drive
Here the project files bundled with the A71CL Host Software package can be used. The
A71CL Host Software Package can be downloaded from [A71CL_HOST_SW] [1].
After unpacking the package the example project files are in the subfolder
‘mcux_projects_frdmk64f’in the case of the FRDM K64F board. It contains one example
project:
•frdmk64f_a71cl_baidu: demonstrate basic communication and crypto with the A71CL
and uses the pre-provisioned Baidu-credentials for signing and signature verification
To import a project from file system, click on ‘Import project(s) from file system…’ in the
‘Quick start Panel’ located in the bottom left. See Fig 19.

NXP Semiconductors
AN12306
A71CL Quick start guide for A71CLARD-BAI and Kinetis
515910
All information provided in this document is subject to legal disclaimers.
© NXP B.V. 2018. All rights reserved.
Application note
COMPANY PUBLIC
Rev. 1.0 — 14 December 2018
515910
16 of 32
Fig 19. Import project from file system
After clicking the import option, a new pop-up will open. In the ‘Project directory
(unpacked)’ field, browse and point to the correct project directory where you installed
the host library (see Fig 20). Then, click on ‘Next’.
Fig 20. Project directory to import

NXP Semiconductors
AN12306
A71CL Quick start guide for A71CLARD-BAI and Kinetis
515910
All information provided in this document is subject to legal disclaimers.
© NXP B.V. 2018. All rights reserved.
Application note
COMPANY PUBLIC
Rev. 1.0 — 14 December 2018
515910
17 of 32
Finally, select all the available example projects, deselect “Copy projects into the
workspace” and then click on ‘Finish’.
in case you want to have the same project imported multiple times independently you
need to unpack it into distinct directories and import these individually as the code needs
to get referenced instead of copied.
Fig 21. Project directory to import
6.5 Terminal setup
A terminal application must be executed from the development PC to interact with the
Kinetis board. Any terminal supporting a serial port interface can be used.
In this document, Tera Term is used and can be downloaded from [TERA_TERM] [2].
The setup wizard will guide the user through the installation. The standard installation
can be chosen for this purpose. Once it is finished, Tera Term can be started.
6.6 OpenSDA configuration
OpenSDA is a serial and debug adapter built into the Kinetis board. It provides a bridge
between the development PC and the Kinetis MCU, which can be used for debugging,
flash programming and serial communication all over USB.
Note: This section explains how to install the correct OpenSDA bootloader firmware
version to the Kinetis FRDM-K64F board. This needs to be done for debugging, flash
programming, and serial communication over a single USB connection between a host
and an embedded target processor. If this section is not followed carefully, it is possible
the examples will not be executed.

NXP Semiconductors
AN12306
A71CL Quick start guide for A71CLARD-BAI and Kinetis
515910
All information provided in this document is subject to legal disclaimers.
© NXP B.V. 2018. All rights reserved.
Application note
COMPANY PUBLIC
Rev. 1.0 — 14 December 2018
515910
18 of 32
To configure OpenSDA into the Kinetis FRDM board, an OpenSDA bootloader (.bin file)
should be downloaded from OpenSDA website [OPENSDA_FIRMWARE] [4]. Scroll
down the page to section ‘Compatible Evaluation Boards’ and search for the target
Kinetis FRDM board. In this case, Fig 22 depicts the OpenSDA bootloader version
defined for the Kinetis FRDM K64F: version 2.0.
Fig 22. OpenSDA bootloader version for the Kinetis FRDM-K64F
Once the OpenSDA bootloader version is identified, click in the ‘Downloads’, scroll down
until ‘J-Link OpenSDA – Generic Firmwares’ appears and download the desired version.
Fig 23 illustrates the process; in this case OpenSDA V2 Bootloader has been selected,
according to the compatible evaluation boards table previously mentioned.
Fig 23. Desired firmware for the Kinetis FRDM-K64F

NXP Semiconductors
AN12306
A71CL Quick start guide for A71CLARD-BAI and Kinetis
515910
All information provided in this document is subject to legal disclaimers.
© NXP B.V. 2018. All rights reserved.
Application note
COMPANY PUBLIC
Rev. 1.0 — 14 December 2018
515910
19 of 32
To write the downloaded firmware into the Kinetis FRDM board, the bootloader mode
should be enabled. For this, press ‘Reset’ button and, while holding down the button,
connect a USB cable to the debugger port of the Kinetis board (e.g., FRDM K64, Fig 24).
Fig 24. Enabling bootloader mode
After connecting the USB cable to the Kinetis board, the green led located inside the
yellow square will start blinking and the development PC will show a new drive called
‘BOOTLOADER’. The drive may disappear again after ~30 seconds in case there is no
interaction, in this case disconnect and connect again with pressing the ‘Reset’ button.
Drag the downloaded firmware directly into the drive (Fig 25). Once the file is copied
inside the ‘BOOTLOADER’ drive the LED will soon start blink fast, then unplug the
Kinetis board and plug it again. The green led stays on, thus indicating that the
OpenSDA bootloader firmware has been configured correctly.
Fig 25. Copying the firmware into the Kinetis board in ‘BOOTLOADER’ mode

NXP Semiconductors
AN12306
A71CL Quick start guide for A71CLARD-BAI and Kinetis
515910
All information provided in this document is subject to legal disclaimers.
© NXP B.V. 2018. All rights reserved.
Application note
COMPANY PUBLIC
Rev. 1.0 — 14 December 2018
515910
20 of 32
A71 application examples execution
The A71 Host software package [A71CL_HOST_SW] [1] includes one application
example:
•frdmk64f_a71cl_baidu: A sample project basic crypto with the pre-provisioned
secure element.
7.1 Running the example
The A71 security IC is connected to the Kinetis board through the Arduino interface
board. With MCUXpresso IDE (installed in the Windows PC) the Kinetis MCU is
programmed, so that it executes the example application.
The execution output can be seen either in the MCUXpresso IDE console or by using
Tera Term. Both cases are explained step by step in this section.
7.1.1 Printing the output with MCUXpresso IDE
Assuming that the SDK has already been installed, and the project examples have been
imported as explained in section 6.3, open MCUXpresso IDE and take the following
steps (Fig 26):
1. Select the project “frdmk64f_a71cl_baidu”in the “Project Explorer”
2. Click on ‘Debug’ in the Quickstart Panel.
3. Select J-Link OpenSDA probe and click on ‘OK’. Make sure the OpenSDA serial port
is connected to the Windows platform (Fig 10, highlighted in red)
4. If a ‘Terms of use’ pop-up appears, check ‘Do not show this message again for
today’ box and click ‘Accept’.