How to build a secure provision workflow
summary
Claims a practical, working supply‑chain solution: Microchip pairs an on‑chip secure element with TTI join‑server HSMs so keys generated inside secure element never travel in the clear, devices ship preprovisioned from a programming center, and a manifest JSON claim workflow ties serials to accounts. Supports LoRaWAN 1.0.x and 1.1, includes one-year TTI join server bundled, offers CLI provisioning and nonce‑based rekeying between join servers, and reports Common Criteria/JIL style third‑party hardness — delivered product and service, not just a checklist.
AI-written summary · about
chapters (13)
- 0:00Intro
- 0:29LoRa Pre-Shared Key (PSK) Architecture
- 0:45How you get a key today
- 2:16Vulnerability in the Backend
- 3:11Change of ownership
- 4:39Supply Chain Vulnerabilities
- 6:17Secure Authentication for LoRaWAN
- 9:44A Simple Onboarding
- 11:56Apply Best Security
- 19:06Security is Measurable: The Star Rating Scale
- 24:54Secure Element for TTI
- 28:25Download the Manifest
- 28:47Claim the Secure Elements
related talks
22mSecure Element: Provisioning made EASY
32mSecure programming and provisioning
45mBuilding a Secure IoT Device
30mSupply Chain Security for IoT Devices
24mMass Deployment of LoRaWAN Sensors
29mEnabling a secure IoT from design to deployment
24mEMBIT LoRaWAN module w/Microchip-TTI crypto element: Micro-embedded approach
25mSecure by Design