Losing the private key used for signing means no further updates can be deployed to secured devices. π Best Practices for Developers
Securely stores and manages persistent secrets, such as the One-Time Programmable Master Key (OTPMK), which are never exposed to the software. Core Components
: Crucial values, such as the "Intent to Secure" (ITS) bit, must be "blown" into the SoC's SFP fuses to permanently enable security features. Alternate Image Support
The user mentioned the "21" in the title. Maybe that's a version number, like Trust Architecture Version 21. I should clarify if there are previous versions and what updates or improvements V21 includes. However, since I don't have access to specific NXP documentation, I'll have to make educated guesses based on general knowledge.
User Guide Workflow and Best Practices