{
    "name": "$PRODUCTNAME",
    "description": "Product for new i.MX6 based product",
    "productType": "RnD",
    "enabled": false,
    "caInfo": [
        {
            "CN": "SRK0 for i.MX6",
            "description": "CA used for i.MX6 HAB for $PRODUCTNAME",
            "useCase": "HABCA",
            "profileID": "$ROOTPROFILEID",
            "keyType": "RSA4096",
            "certificateType": "ROOT",
            "leafs": [
                {
                    "CN": "CSF0",
                    "description": "CSF End-Entity certificate for $PRODUCTNAME",
                    "useCase": "HABCA",
                    "keyType": "RSA4096",
                    "certificateType": "ENDENTITY",
                    "profileID": "$ENDPROFILEID"
                },
                {
                    "CN": "IMG0",
                    "description": "IMG signing certificate for $PRODUCTNAME",
                    "useCase": "HABCA",
                    "keyType": "RSA4096",
                    "certificateType": "ENDENTITY",
                    "profileID": "$ENDPROFILEID"
                }
            ]
        },
        {
            "CN": "SRK1 for i.MX6",
            "description": "CA used for i.MX6 HAB for $PRODUCTNAME",
            "useCase": "HABCA",
            "profileID": "$ROOTPROFILEID",
            "keyType": "RSA4096",
            "certificateType": "ROOT",
            "leafs": [
                {
                    "CN": "CSF1",
                    "description": "CSF End-Entity certificate for $PRODUCTNAME",
                    "useCase": "HABCA",
                    "keyType": "RSA4096",
                    "certificateType": "ENDENTITY",
                    "profileID": "$ENDPROFILEID"
                },
                {
                    "CN": "IMG1",
                    "description": "IMG signing certificate for $PRODUCTNAME",
                    "useCase": "HABCA",
                    "keyType": "RSA4096",
                    "certificateType": "ENDENTITY",
                    "profileID": "$ENDPROFILEID"
                }
            ]
        },
        {
            "CN": "SRK2 for i.MX6",
            "description": "CA used for i.MX6 HAB for $PRODUCTNAME",
            "useCase": "HABCA",
            "profileID": "$ROOTPROFILEID",
            "keyType": "RSA4096",
            "certificateType": "ROOT",
            "leafs": [
                {
                    "CN": "CSF2",
                    "description": "CSF End-Entity certificate for $PRODUCTNAME",
                    "useCase": "HABCA",
                    "keyType": "RSA4096",
                    "certificateType": "ENDENTITY",
                    "profileID": "$ENDPROFILEID"
                },
                {
                    "CN": "IMG2",
                    "description": "IMG signing certificate for $PRODUCTNAME",
                    "useCase": "HABCA",
                    "keyType": "RSA4096",
                    "certificateType": "ENDENTITY",
                    "profileID": "$ENDPROFILEID"
                }
            ]
        },
        {
            "CN": "SRK3 for i.MX6",
            "description": "CA used for i.MX6 HAB for $PRODUCTNAME",
            "useCase": "HABCA",
            "profileID": "$ROOTPROFILEID",
            "keyType": "RSA4096",
            "certificateType": "ROOT",
            "leafs": [
                {
                    "CN": "CSF3",
                    "description": "CSF End-Entity certificate for $PRODUCTNAME",
                    "useCase": "HABCA",
                    "keyType": "RSA4096",
                    "certificateType": "ENDENTITY",
                    "profileID": "$ENDPROFILEID"
                },
                {
                    "CN": "IMG3",
                    "description": "IMG signing certificate for $PRODUCTNAME",
                    "useCase": "HABCA",
                    "keyType": "RSA4096",
                    "certificateType": "ENDENTITY",
                    "profileID": "$ENDPROFILEID"
                }
            ]
        }
    ],
    "rndKeys": [
    ],
    "productOperations": [
        {
            "name": "HAB CST signing",
            "description": "HABCST signing for $PRODUCTNAME",
            "operationType": "SignHAB",
            "approvalRule": {
                "name": "Test rule",
                "description": "Rule used for testing for $PRODUCTNAME",
                "allowedGroups": [
                    "$WRITERGROUP"
                ],
                "approvalGroups": [
                    "$WRITERGROUP",
                    "$APPROVERGROUP"
                ],
                "blanketGroups": []
            }
        },
        {
            "name": "U-Boot signing",
            "description": "U-Boot signing operation",
            "operationType": "SignUBoot",
            "token": {
                "name": "Uboot",
                "description": "HSM token for FIT image U-Boot signing. Shared between other operation types",
                "keyType": "RSA2048",
                "shared": true
            },
            "approvalRule": {
                "name": "Test rule",
                "description": "Rule used for testing for $PRODUCTNAME",
                "allowedGroups": [
                    "$WRITERGROUP"
                ],
                "approvalGroups": [
                    "$APPROVERGROUP"
                ],
                "blanketGroups": []
            }
        },
        {
            "name": "Kernel signing",
            "description": "FIT image kernel signing.",
            "operationType": "SignKernel",
            "token": {
                "name": "Kernel",
                "description": "HSM token for FIT image kernel signing.",
                "keyType": "RSA2048",
                "shared": true
            },
            "approvalRule": {
                "name": "Test rule",
                "description": "Rule used for testing for $PRODUCTNAME",
                "allowedGroups": [
                    "$WRITERGROUP"
                ],
                "approvalGroups": [
                    "$WRITERGROUP",
                    "$APPROVERGROUP"
                ],
                "blanketGroups": []
            }
        }        
    ]
}