Variscite, a leading global System on Module (SoM) designer, developer, and manufacturer, and SecEdge, a leading provider of digital security for physical AI infrastructure, today announced the availability of hardware-anchored TPM 2.0 security functions in firmware across Variscite’s i.MX SoM portfolio.

Devices deployed in the field must defend against cyberthreats for years after they ship. The Trusted Computing Group’s TPM (Trusted Platform Module) 2.0 standard answers this with a protected environment for secure boot, device identity, and the storage and use of cryptographic keys. TPM 2.0 can be implemented as a discrete security chip or in firmware on the application processor. SecEdge’s SEC-TPMTM is a TCG-compliant firmware TPM (fTPM) implementation of TPM 2.0 that runs in the OP-TEE secure world via Arm TrustZone. On i.MX 93 and i.MX 95 SoMs, it can leverage the processor’s security architecture, including the NXP EdgeLock Secure Enclave as the root of trust. Variscite customers can now add TPM 2.0 functionality using the processor already in the design.

The EU Cyber Resilience Act is already in force. Since September 11, 2026, manufacturers have had to report actively exploited vulnerabilities and severe incidents within 24 hours, with full notification at 72 hours. From December 11, 2027, the Act applies in full: products must ship with a secure default configuration and without known exploitable vulnerabilities, receive free security updates across a support period of five years by default, and pass conformity assessment before CE marking. Meeting those requirements depends on a device being able to prove what it is and protect the keys it holds. SEC-TPMTM gives OEMs and system integrators a standards-based way to do both, on the processor already in the design and without a board respin.

Variscite supports customers through the CRA transition with maintained BSP branches carrying kernel and package updates for security issues, documented secure boot and TPM integration on its Developer Center, and product longevity targeted at 7 to 15 years, well beyond the Act’s default five-year support period.

SEC-TPM is not limited to new designs. It can be added to systems already developed or deployed, as long as the device supports secure firmware update. That gives engineering teams a path to CRA readiness ahead of the December 11, 2027 deadline without a board respin. New designs keep the same security architecture as future i.MX generations arrive, and within Variscite’s pin-compatible families, moving to a higher-performance module does not mean revisiting the security design.

“The future belongs to trusted devices. As regulatory requirements increase and cyber threats evolve, manufacturers need security that is both proven and practical,” said Sami Nassar, SecEdge CEO. “Our collaboration with Variscite brings hardware-anchored embedded TPM 2.0 security to millions of edge devices using the silicon already deployed in the field, accelerating the path to trusted and resilient digital infrastructure.”

“The CRA does not only apply to whatever our customers are designing now. It applies to everything they already launched and shipped to the market,” said Ofer Austerlitz, VP of Business Development and Sales at Variscite. “SEC-TPM is available across our i.MX-based modules, so implementing it on Variscite products allows our customers to reach TPM 2.0 seamlessly and with no need to redesign their hardware.”

The SEC-TPM firmware TPM 2.0 implementation is now integrated, documented, and available for download from Variscite’s Developer Center for its i.MX 6/7/8/9 SoM families.

About Variscite

Variscite is a global leader in System on Module (SoM) design and manufacturing, setting the standard for embedded solutions since 2003 with high-quality, reliable modules. The company offers the most extensive Arm-based SoM portfolio in the embedded market, featuring a wide range of configuration options that span from entry-level to high-performance, powered by robust SoCs such as the NXP i.MX8, i.MX9, and i.MX6 series and the Texas Instruments Sitara AM62. Variscite’s in-house production fully complies with ISO 13485, ISO 9001, and ISO 27001 standards, covering medical-grade manufacturing, quality management, and information security, ensuring the highest quality. Coupled with top-tier support and extended product longevity, Variscite consistently delivers dependable products and services throughout the entire product lifecycle, from initial development to end-of-life. For more information, contact Variscite’s sales team at sales@variscite.com or https://variscite.com/contact-us.

About SecEdge

SecEdge provides industry-leading digital security for physical AI infrastructure and edge devices. Renowned for its award-winning AI model protection, the SecEdge SEC-TPM solution is a TCG-compliant firmware TPM 2.0 implementation, seamlessly hardware-anchored with leading semiconductor platforms. From chip to cloud, SecEdge secures physical AI and edge device infrastructure, and enables frictionless compliance with industry and government regulations. Learn more: visit www.secedge.com or contact info@secedge.com.

Trademarks and trade names are properties of their respective owners.

Media gallery

About The Author
Business Wire