diff --git a/build/configs/bk7239n/bk7239n_make_bin.sh b/build/configs/bk7239n/bk7239n_make_bin.sh
index d3a6e7d18e..2a33043fb6 100755
--- a/build/configs/bk7239n/bk7239n_make_bin.sh
+++ b/build/configs/bk7239n/bk7239n_make_bin.sh
@@ -94,27 +94,6 @@ function concatenate_binary_with_signing()
 	bash $BUILDDIR/configs/bk7239n/bk7239n_signing.sh kernel
 }
 
-function make_ss_bin() {
-	# Copy default ss.bin from security_storage directory to output
-	ss_storage_dir=${TOOL_PATH}/security_storage
-	default_ss_bin=${ss_storage_dir}/ss.bin
-	ss_bin=${BUILDDIR}/output/bin/ss.bin
-	beken_utils_path=${TOOL_PATH}/beken_utils
-
-	# If CONFIG_BINARY_SIGNING=y and beken_utils_path exists, do not copy ss.bin; otherwise copy ss.bin
-	if [ "${CONFIG_BINARY_SIGNING}" = "y" ] && [ -d "${beken_utils_path}" ]; then
-		# Do not copy ss.bin
-		echo "CONFIG_BINARY_SIGNING=y and beken_utils found, skip copying ss.bin"
-	else
-		if [ -f "${default_ss_bin}" ]; then
-			echo "Copying ss.bin from ${default_ss_bin} to ${ss_bin}"
-			cp -f "${default_ss_bin}" "${ss_bin}"
-		else
-			echo "Warning: Default ss.bin not found at ${default_ss_bin}, skipping..."
-		fi
-	fi
-}
-
 function get_global_app_num_from_config_for_deployment() {
     # Get CONFIG_NUM_APPS value from os/.config
     [ ! -f "$CONFIG" ] && { echo "0"; return 1; }
@@ -213,7 +192,6 @@ function copy_signed_files()
 function pack_secure_bin()
 {
     python3 ${THIS_PATH}/psram_layout_check.py ${CONFIG}
-	make_ss_bin
 	install_bin_for_deployment
 	if [ "$CONFIG_BINARY_SIGNING" = "y" ]; then
 		if [ ! -f "${BUILDDIR}/tools/armino/beken_utils/deployment_main.sh" ]; then
diff --git a/build/tools/armino/security_storage/ss.bin b/build/tools/armino/security_storage/ss.bin
deleted file mode 100644
index caa43e1629..0000000000
Binary files a/build/tools/armino/security_storage/ss.bin and /dev/null differ
diff --git a/os/board/bk7239n/src/components/tfm/tfm_build_RELEASE_NOTE.txt b/os/board/bk7239n/src/components/tfm/tfm_build_RELEASE_NOTE.txt
new file mode 100755
index 0000000000..9aabae148a
--- /dev/null
+++ b/os/board/bk7239n/src/components/tfm/tfm_build_RELEASE_NOTE.txt
@@ -0,0 +1,7 @@
+/* == "version" + "beken_trustzone pr-xxx "compile date" + "compile time"" == */
+
+== version beken_trustzone pr-209 2026/04/21-17:28:00==
+   
+   1. solve the problem of ss decryption failure
+     The key read from otp does not perform big-endian conversion
+   2. update the flash config of XMC type
\ No newline at end of file
diff --git a/os/board/bk7239n/src/components/tfm/tfm_loadable_build/_build/bl2.bin b/os/board/bk7239n/src/components/tfm/tfm_loadable_build/_build/bl2.bin
index a70c59dfda..ca6b9f6bae 100755
Binary files a/os/board/bk7239n/src/components/tfm/tfm_loadable_build/_build/bl2.bin and b/os/board/bk7239n/src/components/tfm/tfm_loadable_build/_build/bl2.bin differ
diff --git a/os/board/bk7239n/src/components/tfm/tfm_loadable_build/_build/tfm_s.bin b/os/board/bk7239n/src/components/tfm/tfm_loadable_build/_build/tfm_s.bin
index 88fd94fe30..7c2d6519f1 100755
Binary files a/os/board/bk7239n/src/components/tfm/tfm_loadable_build/_build/tfm_s.bin and b/os/board/bk7239n/src/components/tfm/tfm_loadable_build/_build/tfm_s.bin differ
diff --git a/os/board/bk7239n/src/components/tfm/tfm_loadable_build/secure_fw/libtfm_s_veneers.a b/os/board/bk7239n/src/components/tfm/tfm_loadable_build/secure_fw/libtfm_s_veneers.a
index 57dfd3a339..341c2ecb4d 100755
Binary files a/os/board/bk7239n/src/components/tfm/tfm_loadable_build/secure_fw/libtfm_s_veneers.a and b/os/board/bk7239n/src/components/tfm/tfm_loadable_build/secure_fw/libtfm_s_veneers.a differ
diff --git a/os/board/bk7239n/src/components/tfm/tfm_xip_build/_build/bl2.bin b/os/board/bk7239n/src/components/tfm/tfm_xip_build/_build/bl2.bin
index a70c59dfda..ca6b9f6bae 100755
Binary files a/os/board/bk7239n/src/components/tfm/tfm_xip_build/_build/bl2.bin and b/os/board/bk7239n/src/components/tfm/tfm_xip_build/_build/bl2.bin differ
diff --git a/os/board/bk7239n/src/components/tfm/tfm_xip_build/_build/tfm_s.bin b/os/board/bk7239n/src/components/tfm/tfm_xip_build/_build/tfm_s.bin
index 65511541a1..513127a54c 100755
Binary files a/os/board/bk7239n/src/components/tfm/tfm_xip_build/_build/tfm_s.bin and b/os/board/bk7239n/src/components/tfm/tfm_xip_build/_build/tfm_s.bin differ
diff --git a/os/board/bk7239n/src/components/tfm/tfm_xip_build/secure_fw/libtfm_s_veneers.a b/os/board/bk7239n/src/components/tfm/tfm_xip_build/secure_fw/libtfm_s_veneers.a
index a7fce3d17d..3c639c423d 100755
Binary files a/os/board/bk7239n/src/components/tfm/tfm_xip_build/secure_fw/libtfm_s_veneers.a and b/os/board/bk7239n/src/components/tfm/tfm_xip_build/secure_fw/libtfm_s_veneers.a differ