This article appears to contain a large number of buzzwords. There might be a discussion about this on the talk page. Please help improve this article if you can.(June 2020)
The platform consists of integrated hardware built around a silicon chip: the Azure Sphere OS (operating system for Azure Sphere), an operating system based on Linux, and the Azure Sphere Security Service, a cloud-based security service. Azure Sphere security was developed based on Microsoft Research's position on the seven required characteristics of highly secure devices.
Azure Sphere OS
The Azure Sphere OS is a custom Linux-based microcontroller operating system created by Microsoft to run on an Azure Sphere-certified chip and to connect to the Azure Sphere Security Service.[3][4][5] The Azure Sphere OS provides a platform for Internet of things application development, including both high-level applications and real-time-capable applications. It is the first operating system running a Linux kernel[6] that Microsoft has publicly released and the second Unix-like operating system that the company has developed for external (public) users, the other being Xenix.
Azure Sphere Security Service
The Azure Sphere Security Service, also known as AS3, is a cloud-based service that facilitates maintenance, updates, and control for Azure Sphere-certified chips.[7] The Azure Sphere Security Service establishes a secure connection between devices and the internet or cloud services and ensures secure boot. The primary purpose of contact between an Azure Sphere device and the Azure Sphere Security Service is to authenticate the device identity, ensure the integrity and trust of the system software, and certify that the device is running a trusted code base. The service also provides a secure channel for Microsoft to automatically download and install Azure Sphere OS updates and customer application updates to deployed devices.
Azure Sphere chips and hardware
Azure Sphere-certified chips and hardware support two general implementation categories: greenfield and brownfield. Greenfield implementation involves designing and building new IoT devices with an Azure Sphere-certified chip. Azure Sphere-certified chips are currently produced by MediaTek.[8] In June 2019, NXP announced plans to produce a line of Azure Sphere-certified chips. In October 2019, Qualcomm announced plans to produce the first Azure Sphere-certified chips with cellular capabilities.[9] Brownfield implementation involves the use of an Azure Sphere guardian device to securely connect an existing device to the internet. Azure Sphere guardian modules are currently produced by Avnet.
MediaTek 3620
MT3620 is the first Azure Sphere-certified chip and includes an ARM Cortex-A7 processor (500 MHz), two ARM Cortex-M4F I/O subsystems (200 MHz), 5x UART/I2C/SPI, 2x I2S, 8x ADC, up to 12 PWM counters and up to 72x GPIO, and Wi-Fi capability. MT3620 contains the Microsoft Pluton security subsystem with a dedicated ARM Cortext-M4F core that handles secure boot and secure system operation.
Azure Sphere Guardian module
An Azure Sphere Guardian module is external, add-on hardware that incorporates an Azure Sphere-certified chip, enabling secure connectivity for an existing device to the internet. In addition to an Azure Sphere-certified chip, an Azure Sphere Guardian module includes the Azure Sphere OS and Azure Sphere Security Service. The Guardian module provides a secure method for connecting existing devices to the internet without exposing them directly. The guardian module can be connected to a device through an existing peripheral on the device and is then connected to the internet through Wi-Fi or Ethernet. The device itself is not connected directly to the network.
The Linux-based Azure Sphere OS is a platform designed for developers writing applications that use peripherals on the Azure Sphere chip. Applications can run on either the Cortex-A7 core with access to external communications or as real-time capable apps on one of the Cortex-M4 processors. Real-time capable applications can run on either bare metal or with a real-time operating system (RTOS). Developer applications can be distributed to Azure Sphere devices through the same secure mechanism as the Azure Sphere OS updates.
Timeline
The following is a list of announcements and releases from Microsoft around Azure Sphere.