Secure Edge Node D35

Modular compute hardware that's secure and easily customized.

+ Fully enclosed, tamper responsive

+ Secure compute module, Linux OS

+ Hardware security supervisor

+ Motherboard, extensive IO

+ Accessories

+ Enclosure

+ Pre-configured security and software

zymbit secure compute edge for zero trust environments
zymbit secure compute edge for zero trust environments

Secure Edge Node D35

Modular compute hardware that's secure and easily customized.

+ Secure compute module

+ Motherboard

+ Accessories

+ Enclosure

+ Pre-configured security and software

The Secure Modular Compute Platform

Engineered for a lifetime of reliable operation in zero trust environments.

Platform Overview

Integrated Secure Compute Module

  • Hardware secured compute module
  • Verified boot, encrypted file system
  • Broadcom BCM2711 quad-core Cortex-A72 (ARM v8) 64-bit SoC @ 1.5GHz
  • Dedicated cryptographic engine
  • Optional hardware HD wallet
  • Fully encapsulated security hardware
zymbit secure compute module with verified boot

Motherboard with Expansion I/O

Secure Side

Fixed functionality

  • Zymbit Secure Compute Module socket
  • 25W power supply, 12VDC barrel jack input
  • 1G Ethernet, USB2 x 2, HDMI
  • Optional Zymbit HSM6 socket
  • Optional fan
  • Secure enclosure ready
zymbit secure compute motherboard secure side
User Side

Designed to be easily customized.

  • M.2 socket (key B) socket and  micro-SIM cardholder
  • Supports M.2 B/B+M key 2242, 2260, 2280 NVMe SSD
  • Supports M.2 B key 3042 format LTE modems
  • Auxiliary back up battery
  • Auxiliary tamper circuit
  • MIPI CSI Camera x2, DSI Display x1
  • Integrated tamper switches x4
zymbit secure compute motherboard - user side


Customize your secure compute platform with a wide range of Zymbit and third party hardware accessories. 

Zymbit acessories

  • SATA power board, rear connection
  • POE power module, ethernet connection
zymbit secure compute node - POE adapter
zymbit secure compute node - SATA power adapter

Third party accessories

  • SSD M.2 drives
  • Cellular modems & services
  • Cameras
  • Industrial IO and relay boards
  • Displays
zymbit secure compute node - M.2 SSD compatible
zymbit secure compute node - camera support
zymbit secure compute node - M.2 modem compatible
zymbit secure compute node - GPIO HAT compatible

Tough Expandable Enclosure

Zymbit offers a standard enclosure that accommodates Zymbit’s SCM, motherboard, and a choice of accessories.  

Standard Type D35 Enclosure

  • Rugged plastic and metal construction
  • Tamper switch compatible
  • Integrated heatsink
  • Customizable front connector plate
  • Stackable
  • 26.7 x 100.3 x 148 mm,  1.05 x 3.96 x 5.80 Inches
  • Fit into standard 3.5″ drive bay caddy
  • Optional SATA power connector
  • Optional POE module

Custom Features

  • User cover is easily modified to include customer-specific designs 
  • Mechanical interface CAD files available
  • Options User Cover with SATA power support

Full Custom Enclosures

zymbit secure compute node type D35
zymbit secure compute node type D35 - customized

Pre Configured Software & Security Profiles

To simplify your life, Zymbit secure compute nodes can be shipped with a choice of pre-configured OS, application software and security policies that align with your product development stage. OEM and solution specific builds are also available. 


  • Optimized for maximum development flexibility
  • Standard OS builds & tools
  • Partially encrypted file system
  • Relaxed security policies, open ports



  • Customer-specific configurations loaded, tested, deployed.
  • Standard zymbit curated configurations available.


Highlights Secure edge compute node with Linux CPU
Powerful RPi4 compute module, quad core A72
Integrated Zymbit hardware security module
Extensive security and key management features
Bootware™ and Tamperware support
Secure Enclosure Tamper responsive, multiple tamper sensors. D35 size envelope, fits into standard 3.5″ drive bay caddy
Dimensions 26.7 x 100.3 x 148 mm
1.05 x 3.96 x 5.80 Inches
Weight 8.2 oz, 230 g - 12VDC power, standard
9.2 oz, 260 g - POE/SATA power, option
Power Standard* - 12VDC, 2A power, barrel jack, center positive, 2.1mm I.D. x 5.5mm O.D. x 11.0mm
Optional* - POE, internal module, connect via Gigabit Ethernet, front face
Optional* - SATA, internal module, connect via SATA, rear face

* specify at time of ordering
External Interfaces, Connectors 1 x HDMI
1 x USB 2.0, Type A
1 x Gigabit Ethernet, IEEE 1588 precision time protocol, optional POE support*
* specify at time of ordering
External Indicators SCM Power (red)
SCM Activity (green)
SCM Status (blue)
Internal Interfaces, Connectors 1x AUX USB 2.0, header
2x CSI Camera
1x DSI Display
1x 40-pin GPIO header
1x M.2 B-Key
1x Micro SIM port. For use with compatible M.2 modules. Push-push type connector
1x Battery connector, Molex 51021-0200-B (1.25mm Pitch)
1x Zymbit secondary HSM4/HSM6 security module, Zymbit. 1x 5V Fan
Compute Resources Pi Compute Module 4
Broadcom BCM2711 quad-core Cortex-A72 (ARM v8) 64-bit SoC @ 1.5GHz
H.265 (HEVC) (up to 4Kp60 decode), H.264 (up to 1080p60 decode, 1080p30 encode)
OpenGL ES 3.1, Vulkan 1.0
Up to 8GB LPDDR4-3200 SDRAM
Up to 32GB eMMC Flash memory

* different configurations available for OEM quantities
Operating System, Kernel Linux, Raspberry PiOS 64bit*

* other Debian distributions available for OEM quantities
Software API Python, C++, C
Hardware Security Module Zymbit Hardware Security Supervisor
Cryptographically and physically bonded to Compute Module
Measured system identity & authentication Standard factors include RPI host, Zymbit HSM, eMMC memory
OEM factors available with engineered services
Tamper Sensors 2 x Perimeter breach detection circuits*
Accelerometer shock & orientation sensor 
Main power monitor
Battery power monitor
Battery removal monitor

* one assigned to enclosure switches, one to user,
Data encryption & signing examples. Encrypt root file system with dm-crypt, with LUKS key manager hook
Encrypt data blobs with "zblock" function
Encrypt data in flight with OpenSSL integration
Cryptographic Services ECC KOBLITZ P-256 (secp256k1)
ED25519, X25519
TRNG (NIST SP800-22)
ECC NIST P-256 (secp256r1)
AES-256 (FIPS 197)
Example Cipher Suites AWS-IOT | TLS_ECDHE_ECDSA_AES256_SHA
Private / public key pairs 512
Foreign public keys 128
Wallet Functions BIP 32 - hierarchical deterministic wallet
BIP 39 - master seed mnemonic generator
SLIP 39 - with shamir's secret sharing
BIP 44 - mulit-account support
Real time clock 36-60 months operation with external CR2032, application dependent, 5ppm accuracy.
Backup battery Used for RTC and perimeter circuits
Under-module battery connector pads, to any 3V source on motherboard
Optional under module battery holder, for CR2412 coin cell *
* requires motherboard connector height 3.0mm
Backup battery monitor Yes
Last Gasp battery removal detection Yes
Warranty 18 months
Accessories & related products Developer Kit
OEM Custom features Contact Zymbit


Using Product >
  • Getting started
  • Software APIs – python, C, C++
  • Tutorials
  • FAQ & troubleshooting
Conformity Documents >
  • EU Declaration of Conformity
  • FCC Declaration of Conformity
  • RoHS/Reach Declaration of Conformity
  • California Prop 65 Declaration of
CAD Files >
  • Mechanical dimensions
  • Step model
Manufacturing Tools >
  • Secure high speed encryption appliance
  • Programming and provisioning

Ready to buy Secure Edge Node D35?

If you need help with your application, or want to discuss a custom solution then contact us today.
Explore and choose the best Zymbit product for your application. If you have questions or need something custom then were ready to help.

120 Cremona Drive, Goleta, 

California, 93117, USA

+1 (805) 481 4570


Subscribe to email updates.