Embedded Linux with Secure Boot, Encryption, and OP-TEE: made easy with meta-toradex-security

With the EU Cyber Resilience Act (CRA) now in effect and enforcement deadlines approaching, embedded device manufacturers face increasing pressure to implement robust, verifiable security across the entire software stack, from the boot process to data storage and application execution.

In this webinar, Sergio Prado and Daniel Lang will introduce meta-toradex-security, Toradex's open-source Yocto/OpenEmbedded layer that enables production-grade security features on Toradex System on Modules with minimal integration effort.

They will also introduce SoC hardware security features, including those available in TI K3/Jacinto processors and NXP platforms featuring EdgeLock Secure Enclave.

What you'll learn:

• Secure Boot: How to establish a full chain of trust from ROM to rootfs, including bootloader and kernel signing, dm-verity integrity verification, and HSM-backed key management
• Data-at-Rest Encryption: How to protect sensitive data using dm-crypt with hardware-backed key wrapping via CAAM, TPM, or OP-TEE
• Trusted Execution Environment: How OP-TEE enables isolated, hardware-protected execution for firmware TPM (fTPM), PKCS#11 cryptographic operations, and secure storage via RPMB
• EU CRA Compliance: how these building blocks map to EU Cyber Resilience Act (CRA) requirements and what steps you can take today to prepare your products for regulatory compliance

Note: We'll have a dedicated Q&A session at the end of the webinar to answer all your questions.