IoT bootstrapping and certificate management using zero-touch deployment (ZTD) services
The present disclosure is directed to techniques for bootstrapping and certificate management of Internet of Things (IoT) devices using a zero-touch deployment (ZTD) service. In one aspect, a method of managing Internet of Thing (IoT) devices includes receiving, at an IoT management component, a bootstrapping request from an IoT device, the request including location information of the IoT device; receiving, from a controller, credential information for the IoT device; generating a policy for bootstrapping the IoT device based at least on the location information and the credential information; and sending the policy to the IoT device for the IoT device to complete the bootstrapping.
1 . A method of managing Internet of Thing (IoT) devices, comprising:
receiving, at an IoT management component, a bootstrapping request from an IoT device, the request including location information of the IoT device;
after receiving the bootstrapping request from the IoT device, receiving, at the IoT management component and from a controller communicatively coupled to the IoT management component, credential information for the IoT device, wherein the credential information includes at least one of: (a) at least one digital key for managing one or more of software updates associated with the IoT device and (b) one or more device policies, identifying at least one of a duration of validity of a digital certificate associated with the IoT device;
generating a policy for bootstrapping the IoT device based at least on the location information and the credential information; and
sending the policy to the IoT device for the IoT device to complete the bootstrapping.
2 . The method of claim 1 , wherein the one or more device policies are location dependent.
3 . The method of claim 1 , further comprising:
comparing the location information with second location information received from the controller to determine if bootstrapping the IoT device is authorized.
4 . The method of claim 1 , wherein
the policy includes a device certificate re-enrollment policy, and
the IoT device performs a certificate re-enrollment process based on a triggering condition identified in the device certificate re-enrollment policy.
5 . A network controller comprising:
one or more memories having computer-readable instructions stored thereon; and
one or more processors configured to execute the computer-readable instructions to:
receive a bootstrapping request from an Internet of Things (IoT) device, the request including location information of the IoT device;
after receiving the bootstrapping request from the IoT device, receive, at the network controller and from a controller communicatively coupled to the network controller, credential information for the IoT device, wherein the credential information includes at least one of: (a) at least one digital key for managing one or more of software updates associated with the IoT device and (b) one or more device policies, identifying at least one of a duration of validity of a digital certificate associated with the IoT device;
generate a policy for bootstrapping the IoT device based at least on the location information and the credential information; and
send the policy to the IoT device for the IoT device to complete the bootstrapping.
6 . The network controller of claim 5 , wherein the one or more device policies are location dependent.
7 . The network controller of claim 5 , wherein the one or more processors are configured to execute the computer-readable instructions to compare the location information with second location information received from the controller to determine if bootstrapping the IoT device is authorized.
8 . The network controller of claim 5 , wherein the policy includes a device certificate re-enrollment policy.
9 . The network controller of claim 8 , wherein the IoT device performs a certificate re-enrollment process based on a triggering condition identified in the device certificate re-enrollment policy.
10 . One or more non-transitory computer-readable media comprising computer-readable instructions, which when executed by one or more processors of a network controller, cause the network controller to:
receive a bootstrapping request from an Internet of Things (IoT) device, the request including location information of the IoT device;
after receiving the bootstrapping request from the IoT device, receive, at the network controller and from a controller communicatively coupled to the network controller, credential information for the IoT device, wherein the credential information includes at least one of: (a) at least one digital key for managing one or more of software updates associated with the IoT device and (b) one or more device policies, identifying at least one of a duration of validity of a digital certificate associated with the IoT device;
generate a policy for bootstrapping the IoT device based at least on the location information and the credential information; and
send the policy to the IoT device for the IoT device to complete the bootstrapping.
11 . The one or more non-transitory computer-readable media of claim 10 , wherein the execution of the computer-readable instructions by the one or more processors, further cause the network controller to compare the location information with second location information received from the controller to determine if bootstrapping the IoT device is authorized.
12 . The one or more non-transitory computer-readable media of claim 10 , wherein
the policy includes a device certificate re-enrollment policy, and
the IoT device performs a certificate re-enrollment process based on a triggering condition identified in the re-enrollment policy.