AWS IoT Device Provisioning Deep Dive - Just In Time Provisioning (Part 1/2)

[@AjirogheneSunny]

Thank you so much for this great lesson. I have a question, viz. Would each device have a separate unique Certificate embedded in it before it is replaced by the JITP workflow? If yes, how could this be achieved? or could it be that all devices carry the same signed certificate, which would uniquely be replaced on the device's first attempt to connect to AWS IoT core JITP workflow?

[@DatFarrix]

Each device would have a unique certificate that is flashed on by the manufacturer through something like programmable memory. Devices all carrying the same signed certificate is a security risk as devices that never undergo the JITP workflow could potentially be compromised.

[@AjirogheneSunny]

If each device comes with unique certificate, what then is the need for it to be replaced with a new one with the JITP mechanism, isn't that redundancy?

[@DatFarrix]

@@AjirogheneSunny It is not necessarily being replaced. It is being activated on the cloud side. The private key is what really matters here as it is used to generate the certificate, so as long as that is unique, then you mitigate the security risk.

[@musictitles3235]

audio is soooooooo bad