STM32 Trusted Package Creator - where do I find it?

[TDJ]

According to AN5054, to prepare SFI (secure internal firmware install) or SFIx (secure external firmware install) "STM32 Trusted Package Creator" is required. Were do I find it? Searching ST website I find no such software product. Was it maybe recently replaced or "absorbed" by STM32Cube Programmer?

[TDK]

Yes, it's part of STM32CubeProgrammer now.

https://www.st.com/content/st_com/en/ecosystems/stm32trust/security-services.html

 

Location within STM32CubeProgrammer:

 

[christian239955_stm1_st]

Why is it grayed out? Reading AN5054 it seems, I could use  STM32 Trusted Package Creator, what apparently is this part of STM32CubeProgrammer, to create encrypted packages. 

If I can only choose this tab if I'm connected to a STM32U5, STM32U0 oder STM32WBA, how can I encrypt files to be programmes onto a STM32L431 usind the STM32CubeProgrammer CLI?

 

STM32_Programmer_CLI -c port=COM28 -br 115200 -d out.bin 0x08000000 --key aa_myKey --iv 1b_myIv -e all -s 

fails after having created the out.bin with openSSL. So I was hoping the STM32CubeProgrammer could help me...