Secure Edge Node
Modular compute hardware that’s secure and easily customized.
+ Fully enclosed, tamper responsive
+ Secure compute module, Linux OS
+ Hardware security supervisor
+ Motherboard, extensive IO
+ Accessories
+ Enclosure
+ Pre-configured security and software
Secure Edge Node
Modular compute hardware that’s secure and easily customized.
+ Secure compute module
+ Motherboard
+ Accessories
+ Enclosure
+ Pre-configured security and software
The Secure Modular Compute Platform
Engineered for a lifetime of reliable operation in zero trust environments.
Platform Overview
Integrated Secure Compute Module
- Hardware secured compute module
- Verified boot, encrypted file system
- Broadcom BCM2711 quad-core Cortex-A72 (ARM v8) 64-bit SoC @ 1.5GHz
- Dedicated cryptographic engine
- Optional hardware HD wallet
- Fully encapsulated security hardware
Motherboard with Expansion I/O
Secure Side
Fixed functionality
- Zymbit Secure Compute Module socket
- 25W power supply, 12VDC barrel jack input
- 1G Ethernet, USB2 x 2, HDMI
- Optional Zymbit HSM6 socket
- Optional fan
- Secure enclosure ready
User Side
Designed to be easily customized.
- M.2 socket (key B) socket and micro-SIM cardholder
- Supports M.2 B/B+M key 2242, 2260, 2280 NVMe SSD
- Supports M.2 B key 3042 format LTE modems
- Auxiliary back up battery
- Auxiliary tamper circuit
- MIPI CSI Camera x2, DSI Display x1
- Integrated tamper switches x4
Accessories
Customize your secure compute platform with a wide range of Zymbit and third party hardware accessories.
Zymbit acessories
- SATA power board, rear connection
- POE power module, ethernet connection
Third party accessories
- SSD M.2 drives
- Cellular modems & services
- Cameras
- Industrial IO and relay boards
- Displays
Tough Expandable Enclosure
Zymbit offers a standard enclosure that accommodates Zymbit’s SCM, motherboard, and a choice of accessories.
Standard Type D35 Enclosure
- Rugged plastic and metal construction
- Tamper switch compatible
- Integrated heatsink
- Customizable front connector plate
- Stackable
- 26.7 x 100.3 x 148 mm, 1.05 x 3.96 x 5.80 Inches
- Fit into standard 3.5″ drive bay caddy
- Optional SATA power connector
- Optional POE module
Custom Features
- User cover is easily modified to include customer-specific designs
- Mechanical interface CAD files available
- Options User Cover with SATA power support
Full Custom Enclosures
Pre Configured Software & Security Profiles
To simplify your life, Zymbit secure compute nodes can be shipped with a choice of pre-configured OS, application software and security policies that align with your product development stage. OEM and solution specific builds are also available.
Develop
- Optimized for maximum development flexibility
- Standard OS builds & tools
- Partially encrypted file system
- Relaxed security policies, open ports
Secure
- Defined security policies enabled
- Optimized OS build
- Fully encrypted file system
- Verified boot enabled
- Finalize configuration with Security Sanitization Guide and Scripts.
Deploy
- Customer-specific configurations loaded, tested, deployed.
- Standard zymbit curated configurations available.
Specifications
| Highlights | Secure edge compute node with Linux CPU Powerful RPi4 compute module, quad core A72 Integrated Zymbit hardware security module Extensive security and key management features Bootware™ and Tamperware support |
| Secure Enclosure | Tamper responsive, multiple tamper sensors. D35 size envelope, fits into standard 3.5″ drive bay caddy |
| Dimensions | 26.7 x 100.3 x 148 mm 1.05 x 3.96 x 5.80 Inches |
| Weight | 8.2 oz, 230 g – 12VDC power, standard 9.2 oz, 260 g – POE/SATA power, option |
| Power |
Standard* – 12VDC, 2A power, barrel jack, center positive, 2.1mm I.D. x 5.5mm O.D. x 11.0mm Optional* – POE, internal module, connect via Gigabit Ethernet, front face Optional* – SATA, internal module, connect via SATA, rear face * specify at time of ordering |
| External Interfaces, Connectors |
1 x HDMI 1 x USB 2.0, Type A 1 x Gigabit Ethernet, IEEE 1588 precision time protocol, optional POE support* * specify at time of ordering |
| External Indicators |
SCM Power (red) SCM Activity (green) SCM Status (blue) |
| Internal Interfaces, Connectors |
1x AUX USB 2.0, header 2x CSI Camera 1x DSI Display 1x 40-pin GPIO header 1x M.2 B-Key 1x Micro SIM port. For use with compatible M.2 modules. Push-push type connector 1x Battery connector, Molex 51021-0200-B (1.25mm Pitch) 1x Zymbit secondary HSM4/HSM6 security module, Zymbit. 1x 5V Fan |
| Compute Resources | Pi Compute Module 4 Broadcom BCM2711 quad-core Cortex-A72 (ARM v8) 64-bit SoC @ 1.5GHz H.265 (HEVC) (up to 4Kp60 decode), H.264 (up to 1080p60 decode, 1080p30 encode) OpenGL ES 3.1, Vulkan 1.0 Up to 8GB LPDDR4-3200 SDRAM Up to 32GB eMMC Flash memory * different configurations available for OEM quantities |
| Operating System, Kernel | Linux, Raspberry PiOS 64bit* * other Debian distributions available for OEM quantities |
| Software API | Python, C++, C |
| Hardware Security Module | Zymbit Hardware Security Supervisor Cryptographically and physically bonded to Compute Module Dedicated |
| Measured system identity & authentication | Standard factors include RPI host, Zymbit HSM, eMMC memory OEM factors available with engineered services |
| Tamper Sensors | 2 x Perimeter breach detection circuits* Accelerometer shock & orientation sensor Main power monitor Battery power monitor Battery removal monitor * one assigned to enclosure switches, one to user, |
| Data encryption & signing examples. | Encrypt root file system with dm-crypt, with LUKS key manager hook Encrypt data blobs with “zblock” function Encrypt data in flight with OpenSSL integration |
| Cryptographic Services | ECC KOBLITZ P-256 (secp256k1) ED25519, X25519 ECDH (FIPS SP800-56A) TRNG (NIST SP800-22) ECC NIST P-256 (secp256r1) ECDSA (FIPS186-3) AES-256 (FIPS 197) |
| Example Cipher Suites | AWS-IOT | TLS_ECDHE_ECDSA_AES256_SHA MS-AZURE | TLS_ECDHE_ECDSA_AES_128_GCM_SHA256_P256 |
| Private / public key pairs | 512 |
| Foreign public keys | 128 |
| Wallet Functions | BIP 32 – hierarchical deterministic wallet BIP 39 – master seed mnemonic generator SLIP 39 – with shamir’s secret sharing BIP 44 – mulit-account support |
| Real time clock | 36-60 months operation with external CR2032, application dependent, 5ppm accuracy. |
| Backup battery | Used for RTC and perimeter circuits Under-module battery connector pads, to any 3V source on motherboard Optional under module battery holder, for CR2412 coin cell * * requires motherboard connector height 3.0mm |
| Backup battery monitor | Yes |
| Last Gasp battery removal detection | Yes |
| Warranty | 18 months |
| Accessories & related products | Developer Kit |
| OEM Custom features | Contact Zymbit |
Documentation
Using Product >
- Getting started
- Software APIs – python, C, C++
- Tutorials
- FAQ & troubleshooting
Conformity Documents >
- EU Declaration of Conformity
- FCC Declaration of Conformity
- RoHS/Reach Declaration of Conformity
- California Prop 65 Declaration of
CAD Files >
- Mechanical dimensions
- Step model
Manufacturing Tools >
- Secure high speed encryption appliance
- Programming and provisioning
Ready to buy Secure Edge Node?
I HAVE QUESTIONS
If you need help with your application, or want to discuss a custom solution then contact us today.
EXPLORE ALL ZYMBIT PRODUCTS
Explore and choose the best Zymbit product for your application. If you have questions or need something custom then were ready to help.
