Microchip Enhances TrustMANAGER Platform to Support CRA Compliance and Cybersecurity Regulations

Firmware over-the-air updates and remote cryptographic key management provide scalable solutions for addressing IoT security challenges

CHANDLER, Ariz., June 24, 2025 (GLOBE NEWSWIRE) -- International cybersecurity regulations continue to adapt to meet the evolving threat landscape. One major focus is on outdated firmware in IoT devices, which can present significant security vulnerabilities. To address these challenges, Microchip Technology (Nasdaq: MCHP) is enhancing its TrustMANAGER platform to include secure code signing and Firmware Over-the-Air (FOTA) update delivery as well as remote management of firmware images, cryptographic keys and digital certificates. These advancements support compliance with the European Cyber Resilience Act (CRA) which mandates strong cybersecurity measures for digital products sold in the European Union (EU). Aligned with standards like the European Telecommunications Standards Institute (ETSI) EN 303 645 baseline requirements of cybersecurity for consumer IoT and the International Society of Automation (ISA)/International Electrotechnical Commission (IEC) 62443 security of industrial automation and control systems standards, the CRA sets a precedent that is expected to influence regulations worldwide.

Microchip’s ECC608 TrustMANAGER leverages Kudelski IoT’s keySTREAM™ Software as a Service (SaaS) to deliver a secure authentication Integrated Circuit (IC) that is designed to store, protect and manage cryptographic keys and certificates. With the addition of FOTA services, the platform helps customers securely deploy real-time firmware updates to remotely patch vulnerabilities and comply with cybersecurity regulations.

“As evolving cybersecurity regulations require connected device manufacturers to prioritize the implementation of mechanisms for secure firmware updates, lifecycle credential management and effective fleet deployment," said Nuri Dagdeviren, corporate vice president of Microchip’s security products business unit. “The addition of FOTA services to Microchip’s TrustMANAGER platform offers a scalable solution that removes the need for manual, and expensive, static infrastructure security updates. FOTA updates allow customers to save resources while fulfilling compliance requirements and helping to future-proof their products against emerging threats and evolving regulations.”

Further enhancing cybersecurity compliance, the Microchip WINCS02PC Wi-Fi^® network controller module used in the TrustMANAGER development kit is now certified against the Radio Equipment Directive (RED) for secure and reliable cloud connectivity. RED establishes strict standards for radio devices in the EU, focusing on network security, data protection and fraud prevention. Beginning August 1, 2025, all wireless devices sold in the EU market must adhere to RED cybersecurity provisions.

By incorporating these additional services, TrustMANAGER—governed by keySTREAM—tackles key challenges with IoT security, regulatory compliance, device lifecycle management and fleet management. This solution is designed to serve IoT device manufacturers and industrial automation providers. Visit the website to learn more about Microchip’s Trust Platform.

Development Tools
The ECC608 TrustMANAGER is compatible with the MPLAB^® X Integrated Development Environment (IDE) and supported by Microchip’s CryptoAuth PRO development board (EV89U05A) and the CryptoAuthLib software library. The Trust Platform Design Suite (TPDS) contains a use case example including onboarding educational steps and a firmware code example to enable the keySTREAM service to AWS^® with the ECC608 secure element running on a 32-bit Arm^® Cortex^®-M4-based PIC32CX SG41MCU and a WINCS02PC Wi-Fi module.  

Pricing and Availability
You can purchase directly from Microchip or contact a Microchip sales representative or authorized worldwide distributor.

Resources
High-res images available through Flickr or editorial contact (feel free to publish):

• Application image: https://www.flickr.com/photos/microchiptechnology/54566293647/sizes/o/
• Download Microchip’s CRA white paper - Understanding the Cyber Resilience Act and Its Impact on Embedded Systems: https://mkpage.microchip.com/en-us/solutions/technologies/embedded-security/cyber-resilience-act/security-wp
• Trust Platform Design Suite: https://www.microchip.com/en-us/products/security/trust-platform/tpds
  
  

About Microchip Technology:
Microchip Technology Inc. is a leading provider of smart, connected and secure embedded control and processing solutions. Its easy-to-use development tools and comprehensive product portfolio enable customers to create optimal designs which reduce risk while lowering total system cost and time to market. The company’s solutions serve over 100,000 customers across the industrial, automotive, consumer, aerospace and defense, communications and computing markets. Headquartered in Chandler, Arizona, Microchip offers outstanding technical support along with dependable delivery and quality. For more information, visit the Microchip website at www.microchip.com.

Note: The Microchip name and logo, the Microchip logo and MPLAB are registered trademarks of Microchip Technology Incorporated in the U.S.A. and other countries. All other trademarks mentioned herein are the property of their respective companies.

Released June 24, 2025