diff --git a/RKTRUST/RK3358TRUST.ini b/RKTRUST/RK3358TRUST.ini
index 5e5e440d..d90739eb 100644
--- a/RKTRUST/RK3358TRUST.ini
+++ b/RKTRUST/RK3358TRUST.ini
@@ -9,7 +9,7 @@ PATH=bin/rk33/rk3358_bl31_v1.32.elf
 ADDR=0x00040000
 [BL32_OPTION]
 SEC=1
-PATH=bin/rk33/rk3358_bl32_v2.08.bin
+PATH=bin/rk33/rk3358_bl32_v2.09.bin
 ADDR=0x08400000
 [BL33_OPTION]
 SEC=0
diff --git a/bin/rk33/rk3358_bl32_v2.08.bin b/bin/rk33/rk3358_bl32_v2.09.bin
similarity index 74%
rename from bin/rk33/rk3358_bl32_v2.08.bin
rename to bin/rk33/rk3358_bl32_v2.09.bin
index 0cc47204..53276288 100644
Binary files a/bin/rk33/rk3358_bl32_v2.08.bin and b/bin/rk33/rk3358_bl32_v2.09.bin differ
diff --git a/doc/release/RK3358_CN.md b/doc/release/RK3358_CN.md
index b19e95ea..e68caaac 100644
--- a/doc/release/RK3358_CN.md
+++ b/doc/release/RK3358_CN.md
@@ -1,5 +1,17 @@
 # RK3358 Release Note
 
+## rk3358_bl32_v2.09.bin
+
+| 时间       | 文件                  | 编译 commit | 重要程度 |
+| ---------- | :-------------------- | ----------- | -------- |
+| 2024-09-02 | rk3358_bl32_v2.09.bin | 6c78a7d8c   | 重要     |
+
+### New
+
+1. 支持软件TA加密密钥功能，客户可以不烧写密钥的情况下使用TA加密功能。
+
+------
+
 ## rk3358j*{rk3358m*}_ddr_333MHz_v2.11.bin
 
 | 时间       | 文件                                    | 编译 commit | 重要程度 |
diff --git a/doc/release/RK3358_EN.md b/doc/release/RK3358_EN.md
index e5fc4650..59f25f29 100644
--- a/doc/release/RK3358_EN.md
+++ b/doc/release/RK3358_EN.md
@@ -1,5 +1,17 @@
 # RK3358 Release Note
 
+## rk3358_bl32_v2.09.bin
+
+| Date       | File                  | Build commit | Severity  |
+| ---------- | :-------------------- | ------------ | --------- |
+| 2024-09-02 | rk3358_bl32_v2.09.bin | 6c78a7d8c    | important |
+
+### New
+
+1.  Support software TA encryption key, customers can use TA encryption function without burning the key.
+
+------
+
 ## rk3358j*{rk3358m*}_ddr_333MHz_v2.11.bin
 
 | Date       | File                                    | Build commit | Severity  |