Secure provisioning of network services

1. A device comprising:

an embedded memory configured to store software;

a flash memory configured to store configuration data, the flash memory being physically separate from the embedded memory;

at least one processor circuit configured to:

enable an unmanaged interface using the software stored in the embedded memory;

establish a link over the enabled unmanaged interface;

authenticate the link based at least in part on the configuration data stored in the flash memory;

obtain, over the authenticated link, firmware for enabling a managed interface, wherein the device does not contain firmware for enabling the managed interface when powered on; and

erase the obtained firmware upon a power cycle.

2. The device of claim 1 , wherein the link comprises a subscription interface link.

3. The device of claim 1 , wherein the managed interface comprises at least one of a broadband subscription interface, a volatile memory interface, or a flash memory interface.

4. The device of claim 1 , wherein the device comprises the managed interface and the unmanaged interface.

5. The device of claim 4 , wherein the managed interface comprises at least one of a wired local area network interface, a wireless local area network interface, a storage device interface, a media interface, or a telephony interface.

6. The device of claim 5 , wherein the unmanaged interface comprises a broadband interface.

7. The device of claim 1 , wherein the at least one processor circuit is configured to disable the managed interface upon the power cycle.

8. The device of claim 1 , wherein the managed interface is configured to provide wireless local area networking.

9. The device of claim 1 , wherein the managed interface is configured to provide a network security service.

10. A method implemented by a controller of a device, the method comprising:

enabling an unmanaged interface of the device using a software stored in an embedded memory;

establishing a link over the enabled unmanaged interface using the software

authenticating the link based at least in part on configuration data stored in a flash memory that is physically separate from the embedded memory;

obtaining, over the authenticated link and responsive to authenticating the link, subscriber firmware for enabling a managed interface of the device, wherein the device does not include firmware for enabling the managed interface prior to the obtaining; and

erasing the obtained subscriber firmware and disabling the managed interface upon a power cycle.

11. The method of claim 10 , wherein the controller comprises the embedded memory.

12. The method of claim 10 , wherein the managed interface comprises at least one of a broadband subscription interface, a volatile memory interface, or a flash memory interface.

13. The method of claim 10 , wherein the link comprises a subscription interface link.

14. A computer program product comprising instructions stored in an embedded memory, the instructions comprising:

instructions to enable an unmanaged interface of a device;

instructions to establish a link over the enabled unmanaged interface;

instructions to authenticate the link based at least in part on configuration data that is stored in a flash memory that is physically separate from the embedded memory;

instructions to download, over the authenticated link and responsive to authenticating the link, firmware for enabling a managed interface of the device, wherein the device does not contain firmware for enabling the managed interface prior to the download; and

instructions to erase the downloaded firmware and disable the managed interface upon a power cycle.

15. The computer program product of claim 14 , wherein the managed interface comprises at least one of a broadband subscription interface, a volatile memory interface, or a flash memory interface.

16. The computer program product of claim 14 , wherein the link comprises a subscription interface link.