Zero touch provisioning ships a device that configures itself on first power up, which is risky when that first network is untrusted.
The labor saving idea is real for large rollouts, and so is the chance that the device trusts the wrong network.
How it works
Phones, network gear, and endpoints can fetch a configuration without a technician on site.
That first contact is the sensitive moment, because the device may accept setup instructions from whatever it can see.
An untrusted network can offer a hostile configuration or learn about the device before it ever reaches the real organization.
Mutual authentication between the device and the configuration server is the core control.
Concrete examples
- A branch router configures itself when it is plugged into the company network.
- A phone enrolled at a depot receives settings from the vendor service.
- A device powered on at a hotel follows a setup path the owner did not intend.
Protective measures
- Authenticate the device and the configuration server to each other before trust is granted.
- Avoid the first boot on networks you do not control.
- Ship devices only to places that follow a written setup procedure.
- Alert when a device enrolls from a place you did not expect.