Zero touch secure device onboarding and management
summary
Intel provides a zero-touch just-in-time provisioning service that lets factories ship devices straight to end customers — examples show 5,000 gateways onboarding in seconds — by establishing a universal identity, running a tiny SDK client of a few kilobytes, and doing matchmaking, attestation and mutual auth. Platform features used include a firmware TPM, SGX enclaves, accelerators for AES/ECC, an Helix Device Cloud for signed updates and lifecycle, and a hardware TCB reset to reestablish trust over 10–30 year lifetimes.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 2:06Security challenges
- 4:11Intel security essentials
- 11:17Zero-touch onboarding
- 18:01Virtualization and identity
- 26:57Device lifecycle with Helix
- 30:07Secure onboarding deep dive
- 38:16IoT security example
- 39:00Q&A
related talks
45mBuilding a Secure IoT Device
40mTrusted Internet of Things Device Onboarding and Lifecycle Management
10mZero Touch Provisioning: the path to massive adoption
22mSecure and Massive IoT Device Factory Provisioning
30mSupply Chain Security for IoT Devices
57mSecuring the last mile of IoT solutions
38mBoot to Cloud Security Considerations with IoT
18mBeyond the Default Password: Building Trustworthy IoT Products