NXP’s MCX A5 Chips Put Factory Sensors on Ethernet, With Post-Quantum Security Built In

IoT 18 AUG 2026 1,528 words 7 min read By Tech Desk

NXP Semiconductors has started sampling a new microcontroller family built to drag industrial gear off aging serial wiring and onto standard IP networks. The MCX A5 line wraps a Cortex-M33 core, a single-pair Ethernet interface and post-quantum cryptography into one package, and the company says it is the first wired MCU with automatic topology discovery on a 10BASE-T1S Ethernet digital PHY.

The timing is no accident. Chips that can talk to a plant network are becoming the bottleneck for the AI push in manufacturing, because the data those systems want simply is not reaching the cloud. According to Omdia's June 2026 report on cellular IoT module market shares, AI and edge processing are now accelerating across industrial automation use cases, with manufacturers connecting more equipment to chase operational intelligence. But most of the devices on a factory floor are still either offline or plugged into serial buses that predate the web.

"The industrial edge needs real-time data to do anything useful, and most of that data is stranded behind serial links," Charles Dachs, executive vice president and general manager of secure connected edge at NXP, said in the announcement. His framing matches what the hardware actually does: instead of adding another gateway box, NXP put the network stack and the security layer directly on the controller chip.

Industrial temperature control panels with digital controllers and cabling inside an automation enclosure

The Parts List Behind the Pitch

The MCX A5 family runs an Arm Cortex-M33 core at up to 240 MHz, with as much as 2 MB of flash and 640 KB of RAM. Around that core sit the usual industrial interfaces — UART, I²C, I3C, SPI, CAN FD, high-speed USB and FlexIO — plus the piece that makes this launch different: an integrated 10BASE-T1S digital PHY.

That PHY is what lets a sensor, actuator or controller attach directly to an Ethernet network over a single pair of wires. It removes a separate transceiver and, in many designs, a switch port too. NXP pairs it with the TJF1410 physical medium dependent transceiver, which acts as the analog front end, to make a complete single-pair Ethernet (SPE) solution for industrial and building automation.

Security is treated as a headline feature rather than an afterthought. The family carries PSA Certified Level 3 assurance and a post-quantum hardware root of trust that spans secure boot, secure firmware updates, secure attestation and secure debug authentication. Selected parts also support the Rust programming language, which lets developers write memory-safe firmware instead of the usual C.

Why Factories Are Still Stuck on Serial

None of this would matter if industry had moved to IP networking decades ago. It did not, and the reasons are concrete. Most sensors, actuators and controllers on plant floors still talk RS-485, an electrical standard published in 1983, or RS-232, which is older still. Two wires, dozens of devices tapped along the same cable, long runs, decent noise immunity, low cost — RS-485 survived because it is simple and it works.

But RS-485 is not an IP network. Every vendor layered its own proprietary protocol on top of the electrical signaling, so data from one maker's gear cannot be read by another's without custom glue. The trapped data is exactly what predictive maintenance and intelligent energy management need.

The wiring math held Ethernet back just as hard. Conventional Ethernet needs two or four pairs, and every device needs its own cable back to a switch. A plant operator looking at hundreds of sensors did the arithmetic — pull dedicated cable to every endpoint, buy switch ports to terminate them — and declined. Serial stayed.

10BASE-T1S Breaks the Wiring Deadlock

The technical answer is 10BASE-T1S, standardized as IEEE 802.3cg in 2019. It runs 10 Mbps Ethernet over a single wire pair, with multiple nodes tapped along the same cable and no switch in between. The protocol stack is IP, the same one used everywhere else on the internet. One wire pair, dozens of devices strung along a bus, exactly the topology that made RS-485 attractive in the first place.

The trade-offs are real. The standard guarantees 25 meters for a multidrop segment, versus 1,200 meters for RS-485, so it is not a drop-in retrofit for every line. A longer-range variant, 10BASE-T1L, covers kilometer distances and will matter for the next wave. For upgrading serial connections to IP inside a machine or a small cell, though, the topology finally matches what plant engineers were already comfortable with.

Latency, the other big objection to Ethernet in control systems, gets a fix too. Classic Ethernet lets nodes transmit whenever the wire looks idle and sort out collisions later, which means response times vary. IEEE 802.3cg adds Physical Layer Collision Avoidance, giving each node a scheduled turn in a repeating sequence. Collisions stop happening, and the upper bound on latency becomes something an engineer can calculate.

None of this is speculative. Automotive adopted 10BASE-T1S first, because cabling weight and volume are a direct cost on every car, and the standard is now supported by parts from NXP, Microchip, Analog Devices, onsemi and Texas Instruments, with OEM zonal-architecture programs already in production.

Topology Discovery: Knowing What's on the Wire

An Ethernet switch knows exactly which device hangs off each port. A multidrop bus has one port for everything on the cable, so it has no such map. Sixteen identical temperature sensors on a single wire run are electrically indistinguishable — when one reports a fault, it could be any of them.

NXP's answer, developed through the OPEN Alliance specification process, measures signal propagation delay between nodes and converts it into physical distance along the cable. The result is an ordered map of what is on the bus and where. That replaces the manual, error-prone tracing and labeling that plant staff used to do with clipboards, and it is the first time the trick has shipped on a wired MCU.

For installers, that means a commissioning tool that sees the network layout instead of a bucket of unlabeled wires. For the rest of the operation, it means a maintenance log that knows which controller sits at which end of the line.

Close-up of a printed circuit board with an Ethernet port and SATA connectors

Security for a Twenty-Year Life

Post-quantum cryptography in a $3 microcontroller sounds like overkill until you look at how long industrial equipment stays in service. A valve controller installed today may still be running in 2045. The cryptographic standards that protect it now may not survive the arrival of capable quantum computers, and the upgrade cycle for factory gear is not like a phone — nobody swaps out a production line because a new cipher came out.

NXP's counter is a root of trust that already supports post-quantum algorithms, plus firmware signing and debug authentication that survive the product's full lifetime. The company also points at the European Cyber Resilience Act, which pushes connected products toward exactly this kind of baseline: secure defaults, signed updates, and no default passwords. The MCUXpresso software stack ships long-term-support releases, and the family runs Zephyr RTOS for teams that want an open-source environment.

CAREL, a maker of control systems for HVAC and refrigeration, has signed on as an early design partner. The company's chief technology officer, Paolo Faraldi, said its future products depend on getting trusted data from the very edge of cooling and climate systems, and that the combination of Ethernet connectivity with next-generation security is what makes that possible.

What Comes Next

The MCX A5 family is sampling now, with FRDM development boards and the full MCUXpresso tooling available around it. Volume availability typically follows within a quarter or two, and the first production designs with these parts should show up in building controllers and industrial gateways through 2027.

The bigger story is what the parts represent. A decade of industrial IoT talk has produced plenty of connectivity modules, but the installed base stayed fragmented because retrofitting was expensive. NXP is betting that putting IP networking and modern security directly on the controller, at a price competitive with serial-era parts, finally makes the upgrade math work for the tens of millions of sensors still sitting on RS-485 buses.

Analysts at Moor Insights and Strategy, who watched the launch at NXP's analyst summit, expect the transition to be slow but real. The enormous brownfield base of legacy equipment will sit alongside new IP-connected gear for years, so the near-term picture is a mix of networks rather than a clean cutover. But the upgrade path is now clear, and it starts with new systems that are born with IP networking and post-quantum security, instead of bolting connectivity on later.

For buyers in the IoT and Semiconductors markets, the practical takeaway is simple: the networking options on a data sheet now carry a security story strong enough for a 20-year installation. When the next round of factory automation tenders comes around, single-pair Ethernet with topology discovery is likely to be on the spec sheet — and the old serial port will be the thing getting retired.