Optional Extensions

Optional extensions add capabilities to OrchestraOS for specific deployment requirements. They are supplied as separate layers and selected alongside the base distribution, target hardware, and application configuration.

The following chapters describe each extension’s capabilities and contents. Build instructions, configuration settings, and operational details are maintained in README.md in the corresponding layer repository.

• Extended Security
• NetHSM Signing
• Machine Learning

Extended Security adds hardware-backed storage protection, device-bound encryption, and early-boot security integration on supported EIG gateways.

NetHSM Signing integrates Nitrokey NetHSM with image-signing tools so that boot artifacts and RAUC update bundles can use keys held by an external HSM.

Machine Learning integrates the NXP inference stack for supported i.MX8M Plus targets, including TensorFlow Lite acceleration and computer-vision packages.

Extension access and commercial licensing are arranged separately from the base distribution. Contact sales@cthings.co for availability and licensing information.