Secure and Massive IoT Device Factory Provisioning
summary
A concrete factory flow that actually generates per-device credentials for large batches and writes them into Zephyr-backed secure storage is presented: custom scripts plus a released factory provisioning tool produce encoded SIBO blobs, integrate with Zephyr’s NVS and Settings subsystems, and demo on Nordic boards. The extension registers devices to Microsoft Azure AWS and Coiote IoT DM, handles certificate generation or upload, and runs end-to-end in the demos; remote provisioning remains the fallback when factories can’t be trusted or when tens of thousands a day makes roundtrip key exchange impractical.
AI-written summary · about
chapters (6)
- 0:00Start
- 3:02Device provisioning Things to consider • When the actual process is going to happen? • Hacking one device should not compromise operation of other devices
- 3:46Remote provisioning • Remotely provide configuration data to device • Happens on first device connection
- 10:48What needs to be implemented on factory side Custom configurations per device • Flashing of the device
- 11:24Server configuration Server to which device should be
- 11:56Device configuration Expressed as LWMM
related talks
45mBuilding a Secure IoT Device
30mProvisioning in Zephyr
29mEnabling a secure IoT from design to deployment
39mZero touch secure device onboarding and management
57mSecuring the last mile of IoT solutions
40mTrusted Internet of Things Device Onboarding and Lifecycle Management
39mApplied IoT security for healthcare and industrial
30mSupply Chain Security for IoT Devices