SESIP Profile for PSA Certified - Level 4 iSE/SE and RoT Component - BETA Release 2.0 - Document JSADEN023

Oct 2, 2026

Uploaded by Stanford

PSA Certified is an independent security evaluation scheme for Platform Security Architecture (PSA) based IoT systems. It builds trust through a multi-level assurance program for chips that include a Root of Trust (PSA-RoT), delivering trusted platform functionality. This SESIP profile describes PSA Certified Level 4 iSE/SE as a fixed-time, test-laboratory evaluation of a PSA-RoT Trusted Subsystem, targeting protection against physical and software attacks in the 0-24 potential range.

LanguageEnglish

CategoryExam

FormatPDF

Pages25

Reading Time1 h 3 min

AccessFree to download

PSA Certified overview

Root of Trust assurance and trust model

PSA Certified Level 4 iSE/SE scope

Evaluation objective and attack potential

Security Functional Requirements (SFRs)

Submission, testing, and certification process

Approved test laboratory and reports

Certification body approval and certificate issuance

Document metadata

SESIP Profile for PSA Certified™ Level 4 iSE/SE and RoT Component Document number: JSADEN023 Version: 2.0 BETA Release Number: 03 Authors: PSA JSA Members: Applus+ Laboratories Arm Limited CAICT DEKRA Testing and Certification ECSEC Laboratory Inc Institute for Information Industry ProvenRun S.A.S. Riscure B.V. Serma Safety & Security S.A.S. SGS Brightsight B.V. TrustCB B.V. UL TS B.V. Authorized by: PSA JSA Members Date of Issue: 09/07/2024 © Copyright Arm Limited 2017-2024. All rights reserved Document Number: JSADEN023 Version: 2.0 BETA 03 Non-Confidential Abstract PSA Certified is the independent security evaluation scheme for Platform Security Architecture (PSA) based IoT systems. It establishes trust through a multi-level assurance program for chips containing a security component called a Root of Trust (PSA-RoT) that provides trusted functionality to the platform. The multi-level scheme has been designed to help device makers and businesses get the level of security they need for their use case. An overview of SESIP Profiles important to the PSA Certified scheme is given in Figure 1 that showshow this document relates to others for the chip’s Root of Trust. PSA Certified Level 4 iSE/SE is a fixed time, test laboratory based, evaluation of a PSA-RoT’s Trusted Subsystem. It is aimed at IoT devices that need to protect against physical and software attacks with attacker potential in the range 0-24 (equivalent to JIL Moderate) . A PSA Certified Level 4 iSE/SE Trusted Subsystem must meet a mandatory set of Security Functional Requirements (SFRs) . Where this condition is not met, this document can alternatively be used for a PSA Certified Level 4 RoT Component certification. Developers submit their PSA-RoT to an approved test laboratory, listed [on](on www.psacertified.org)[ www.psacertified.org](on www.psacertified.org), for Level 4 evaluation and receive an Evaluation Technical Report. If the PSA-RoT is assessed as passing and approved by the independent Certification Body, a digital certificate will be issued on the PSA Certified website. Keywords PSA Certified Level 4 iSE/SE, SESIP, Certification, IoT, Platform Security Architecture, Questionnaire, PSA, Security, PSA Certified RoT Component Figure 1: PSA Certified SESIP Profiles for the chip’s RoT Document Number: JSADEN023 Version: 2.0 BETA 03 Non-Confidential Copyright ©2017-2024 Arm Limited or its affiliates. All rights reserved. The copyright statement reflects the fact that some draft issues of this document have been released, to a limited circulation. Non-Confidential Proprietary Notice This document is protected by copyright and other related rights and the practice or implementation of the information contained in this document may be protected by one or more patents or pending patent applications. No part of this document may be reproduced in any form by any means without the express prior written permission of Arm. No license, express or implied, by estoppel or otherwise to any intellectual property rights is granted by this document unless specifically stated. Your access to the information in this document is conditional upon your acceptance that you will not use or permit others to use the information for the purposes of determining whether implementations infringe any third-party patents. THIS DOCUMENT IS PROVIDED “AS IS”. ARM PROVIDES NO REPRESENTATIONS AND NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTABILITY, SATISFACTORY QUALITY, NON-INFRINGEMENT OR FITNESS FOR A PARTICULAR PURPOSE WITH RESPECT TO THE DOCUMENT. For the avoidance of doubt, Arm makes no representation with respect to, and has undertaken no analysis to identify or understand the scope and content of, patents, copyrights, trade secrets, or other rights. This document may include technical inaccuracies or typographical errors. TO THE EXTENT NOT PROHIBITE

FAQs

What is PSA Certified in the context of IoT security?

PSA Certified is an independent security evaluation scheme for PSA-based IoT systems. It establishes trust via a multi-level assurance program centered on a chip Root of Trust (PSA-RoT).

What does PSA Certified Level 4 iSE/SE evaluate?

PSA Certified Level 4 iSE/SE evaluates a PSA-RoT’s Trusted Subsystem using a fixed time, test laboratory-based assessment. It targets IoT devices needing protection against physical and software attacks within the 0-24 potential range.

How do developers obtain a certificate after evaluation?

Developers submit the PSA-RoT to an approved test laboratory to receive an Evaluation Technical Report. If the PSA-RoT passes and is approved by the independent Certification Body, a digital certificate is issued on the PSA Certified website.

Oct 2, 2026

Uploaded by Stanford