Network device authentication

1. A method to authenticate a network device, the method comprising:

receiving an authentication message from a third party server, the authentication message identifying a network device;

receiving a zero touch provisioning (ZTP) request comprising a certificate from the network device;

determining the network device is associated with a third party that manages the third party server based on the certificate; and

transmitting a redirect message comprising a root certificate chain indicating that the network device is to send the ZTP request to the third party server.

2. The method of claim 1 , wherein the third party server is a first third party server, further comprising:

receiving a reauthentication message from the first third party server indicating that a second third party server associated with the first third party server is a third party server with permission to perform ZTP of the network device.

3. The method of claim 1 , wherein the third party server is a first third party server, the method further comprising:

receiving a reauthentication message from the first third party server indicating that the network device is being assigned to a second third party server; and

updating the root certificate chain to indicate that, after being authenticated by the first third party server, the network device is to send ZTP requests to the second third party server.

4. The method of claim 1 , further comprising after transmitting the redirect message, receiving a reauthentication message from the third party server identifying that the network device is ready to be reauthenticated.

5. The method of claim 1 , wherein the redirect message includes a maximum number of third party servers the network device can be redirected to before performing a security check.

6. The method claim 5 , wherein the security check comprises automatically shutting down after being redirected to more third party servers than the maximum number of third party servers.

7. The method of claim 1 , wherein the certificate comprises an organization name, and wherein determining the network device is associated with the third party that manages the third party server based on the certificate comprises:

determining the organization name included in the certificate matches an original equipment manufacturer (OEM) name;

transmitting an organization status request to a network management device; and

receiving an organization status indicating that the network device is associated with the third party that manages the third party server.

8. The method of claim 1 , further comprising:

authenticating the network device based on the authentication message and the ZTP request,

wherein the redirect message is sent in response to authenticating the network device.

9. A non-transitory computer-readable medium that includes computer-readable instructions stored thereon that are executable by a processor to perform or control performance of operations comprising:

receive an authentication message from a third party server, the authentication message identifying a network device;

receive a zero touch provisioning (ZTP) request comprising a certificate from the network device;

determine the network device is associated with a third party that manages the third party server based on the certificate; and

transmit a redirect message comprising a root certificate chain indicating that the network device is to send the ZTP request to the third party server.

10. The non-transitory computer-readable medium of claim 9 , wherein the third party server is a first third party server, the operations further comprising:

receive a reauthentication message from the first third party server indicating that a second third party server associated with the first third party server is a third party server with permission to perform ZTP of the network device.

11. The non-transitory computer-readable medium of claim 9 , wherein the third party server is a first third party server, the operations further comprising:

receive a reauthentication message from the first third party server indicating that the network device is being assigned to a second third party server; and

update the root certificate chain to indicate that, after being authenticated by the first third party server, the network device is to send ZTP requests to the second third party server.

12. The non-transitory computer-readable medium of claim 9 , the operations further comprising after the operation of transmit the redirect message, receive a reauthentication message from the third party server identifying that the network device is ready to be reauthenticated.

13. The non-transitory computer-readable medium of claim 9 , wherein the certificate comprises an organization name, and wherein the operation determine the network device is associated with the third party that manages the third party server based on the certificate further comprises:

determine the organization name included in the certificate matches an original equipment manufacturer (OEM) name;

transmit an organization status request to a network management device; and

receive an organization status indicating that the network device is associated with the third party that manages the third party server.

14. The non-transitory computer-readable medium of claim 9 , the operations further comprising:

authenticate the network device based on the authentication message and the ZTP request,

wherein the redirect message is sent in response to authenticating the network device.

15. A system, comprising:

a network device; and

an original equipment manufacturer (OEM) server, the OEM server configured to perform operations, the operations comprising:

receive an authentication message from a third party server, the authentication message identifying the network device;

receive a zero touch provisioning (ZTP) request comprising a certificate from the network device;

determine the network device is associated with a third party that manages the third party server based on the certificate; and

transmit a redirect message comprising a root certificate chain indicating that the network device is to send the ZTP request to the third party server.

16. The system of claim 15 , wherein the third party server is a first third party server, and the system further comprising a second third party server, the operations further comprising:

receive a reauthentication message from the first third party server indicating that the second third party server is associated with the first third party server and is a third party server with permission to perform ZTP of the network device.

17. The system of claim 15 , wherein the third party server is a first third party server, and the system further comprising a second third party server, the operations further comprising:

receive a reauthentication message from the first third party server indicating that the network device is being assigned to the second third party server; and

update the root certificate chain to indicate that, after being authenticated by the first third party server, the network device is to send ZTP requests to the second third party server.

18. The system of claim 15 , the operations further comprising, after the operation of transmit the redirect message, receive a reauthentication message from the third party server identifying that the network device is ready to be reauthenticated.

19. The system of claim 15 , the system further comprising:

a network management device,

wherein the certificate comprises an organization name, and

wherein the operation determine the network device is associated with the third party that manages the third party server based on the certificate further comprises:

determine the organization name included in the certificate matches an OEM name;

transmit an organization status request to the network management device; and

receive an organization status indicating that the network device is associated with the third party that manages the third party server.

20. The system of claim 15 , the operations further comprising:

authenticate the network device based on the authentication message and the ZTP request,

wherein the redirect message is sent in response to authenticating the network device.