TPM 2.0 security MCU adds certified hardware trust for connected devices

September 3, 2026

To maintain embedded security over long product lifecycles, the Infineon SLB9673 combines hardware-based identity protection, cryptographic key storage, measured boot, and PQC-protected firmware updates to ensure resilient IoT device security and CRA compliance.

The SLB9673 MCU is designed for practical Trusted Platform Module (TPM) integration into embedded and industrial systems without significantly increasing board space, interface complexity, or standby power, while adding a standardized trust anchor for secure connected products. The SLB9673 is optimized for Internet of Things (IoT) and Information and Communications Technology (ICT) applications by adhering to Trusted Computing Group (TCG) TPM 2.0 specifications. The MCU uses an I2C host interface, supports automatic low-power operation after command transactions, and is available in extended temperature variants up to +105°C.

Connected systems are protected against unauthorized firmware, software tampering, and rollbacks to untrusted states with secure device identity and measured boot. The SLB9673 TPM accomplishes this by combining provisioned endorsement keys (EKs), EK certificates, and platform configuration registers (PCRs). The EKs provide a cryptographically backed identity for the TPM, while PCRs store hash measurements of firmware, bootloader, and software components as the platform starts. These measurements can then be used for attestation, allowing a local or remote verifier to verify whether the device has booted into a known, trusted configuration. Long-term firmware maintenance is also supported by firmware protection from a post-quantum cryptography (PQC) update mechanism, helping connected products maintain a stronger security posture over extended deployment lifecycles.

 

This hardware-level security extends to cryptographic functions that reduce the need for the main processor or application software to handle sensitive key material directly. The SLB9673 allows these keys to be generated, protected, and used locally within the TPM, with support for Rivest-Shamir-Adleman (RSA), elliptic curve cryptography (ECC), secure hash algorithm (SHA) hashing, advanced encryption standard (AES) and a standards-based random number generator (RNG), giving engineers a hardware-backed foundation for authentication, signing, integrity checking, encrypted data workflows and attestation.

Features

  • PG-UQFN-32 package
  • JEDEC JESD22 and J-STD-020 qualified
  • AES-128, AES-192 and AES-256 support
  • Common Criteria EAL4+ certification
  • FIPS 140-2 Level 2 certification
  • 51 kByte non-volatile memory
  • 24 platform configuration registers
  • I2C interface with clock stretching
  • Low standby current draw: 120µA
  • Enhanced -40°C to 85°C or extended -40°C to 105°C) temperature ranges
  • Provisioned RSA and ECC endorsement certificates

Applications

  • IoT applications:
    • Connected embedded devices
    • Battery-operated devices
    • Secure edge devices
    • Long-life connected products
  • Industrial and embedded systems:
    • Industrial gateways
    • Embedded controllers
    • Outdoor connected equipment
    • Extended-temperature systems
Infineon Technologies — OPTIGA TPM SLB9673 Trusted Platform Module Microcontroller

Evaluation Board/Development Kit

Part Number: TPM9673FW2625RPIEBTOBO1 OPTIGA TPM SLB 9673 RPI EVAL 

The OPTIGA™ TPM SLB9673 Raspberry Pi® Evaluation Board provides a hardware platform for evaluating Infineon’s OPTIGA TPM SLB9673 FW 26.xx Trusted Platform Module in a target system environment. The board is designed as an I2C TPM HAT for Raspberry Pi platforms, enabling assessment of TPM 2.0 functionality in a compact embedded development setup.

 

The evaluation board follows the Raspberry Pi HAT specification and includes a stackable 40-pin header for compatibility with Raspberry Pi 2, 3, 4, Zero, and Zero2 boards. It also supports automated loading of the required device-tree overlay, helping simplify initial integration when bringing the TPM into a Raspberry Pi-based verification environment.

 

The board supports 3.3V or 1.8V power supply operation and provides reset control through both a physical reset button and a configurable Raspberry Pi general purpose input/output (GPIO) reset input. This allows engineers to evaluate host-controlled and manual reset behavior during development and system verification. It is intended for assessing TPM integration, platform trust functions, and hardware-backed security workflows before moving towards custom board implementation.

 

FTM Board Club

Sign up for access to exclusive development boards, an essential tool for many innovative design projects.

*Available to pre-qualified EMEA customers only.

Tags

Related Articles

Microchip — PIC32CM Lx Family Microcontrollers
Microchip's PIC32CM Lx Family of Microcontrollers was the industry's first MCU to combine a secure sub-system...
Read More
onsemi — AR0822 Image Sensor
The new AR0822 from onsemi produces excellent image quality in mixed dark and bright lighting thanks...
Read More
STMicroelectronics — STM32TRUSTEE-SM Secure Manager Software
STMicroelectronics STM32TRUSTEE-SM Secure Manager Software enhances system security.
Read More

Subscribe to our newsletters

Subscribe to Future Electronics

Get access to the latest product information, technical analysis, design notes and more

Choose your region

Subscribe to our newsletters

Get access to the latest product information, technical analysis, design notes and more.

BE AT THE

FOREFRONT

OF NEW TECHNOLOGY INNOVATIONS

Choose your region