> ## Documentation Index
> Fetch the complete documentation index at: https://dragonwingdocs-staging.qualcomm.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Security tools

To build secure software on Qualcomm devices using TrustZone and secure boot, the key tools needed are SecTools v2 and LLVM compiler for Arm<sup>®</sup>, targeting the Snapdragon<sup>®</sup> devices.

SecTools v2 is a suite of Qualcomm security tools designed to support secure boot, image authentication, debug policy creation, and fuse programming across Qualcomm system-on-chips (SoCs). The LLVM compiler for Qualcomm<sup>®</sup> Trusted Execution Environment (Qualcomm TEE) is a specialized toolchain used to build secure software components for TEE on Qualcomm devices.

## **SecTools v2**

1. Go to the SecTools v2 folder.
   The SecTools executable is located in the following path.
   > `<Metabuild>/<chipset>.LE.X.x/common/sectoolsv2/ext/<host_machine>`
   > This folder has the binaries and scripts required for secure boot, image signing, and other security operations.
2. Locate the security Profile XML.
   > The `<chipset>.LE.X.x/common/sectoolsv2/<chipset>_security_profile.xml` file defines the security configuration used by SecTools.

> <Note>
>   The minimum SecTools version required is 1.43 or later.
> </Note>

The table lists the documentation for SecTools v2.

**Table : SecTools v2**

| **Document** | **Description** |
| :-: | :-: |
| [SecTools V2: Metabuild Secure Image User Guide](https://docs.qualcomm.com/bundle/80-NM248-17/resource/80-NM248-17_REV_AB_SecTools_V2__Metabuild_Secure_Image_User_Guide.pdf) | Perform the secure-image operations on metabuild software images. |
| [SecTools V2: Fuse Blower User Guide](https://docs.qualcomm.com/bundle/80-NM248-9/resource/80-NM248-9_REV_AB_SecTools_V2__Fuse_Blower_User_Guide.pdf) | Create and sign the fuse blower images. When a device uses a fuse blower image, it blows the specified fuse. |
| [SecTools V2: ELF Tool User Guide](https://docs.qualcomm.com/bundle/80-NM248-18/resource/80-NM248-18_REV_AD_SecTools_V2__ELF_Tool_User_Guide.pdf) | Generate, add segments, and combine the ELF software images. |
| [SecTools V2: MBN Tool User Guide](https://docs.qualcomm.com/bundle/80-NM248-19/resource/80-NM248-19_REV_AB_SecTools_V2__MBN_Tool_User_Guide.pdf) | Add the modem configuration binary (MBN) headers to binary images. |
| [SecTools V2: ELF Consolidator User Guide](https://docs.qualcomm.com/bundle/80-NM248-20/resource/80-NM248-20_REV_AA_SecTools_V2__ELF_Consolidator_User_Guide.pdf) | Create the consolidated ELF software images. A consolidated ELF has the contents of many subsystem images. |
| [SecTools V2: Secure Image User Guide](https://docs.qualcomm.com/doc/80-NM248-12/topic/secure-image-usage.html) | Sign, encrypt, and inspect Qualcomm software images. |
| [SecTools V2: Secure Debug User Guide](https://docs.qualcomm.com/bundle/80-NM248-23/resource/80-NM248-23_REV_AA_SecTools_v2__Secure_Debug_User_Guide.pdf) | Generate and sign the debug policy images to enable device debugging and authentication. |

<Note>
  The *SecTools* guides are available to licensed users with authorized access.
</Note>

## **Next steps**

* To initialize and configure the hardware for running securely on Linux, see [Verify security configurations](./verify-the-security-configurations-of-qualcomm-linux).
* To configure Qualcomm TEE for securing devices that handle sensitive data and run trusted applications, see [Configure security services](./configure).