Abstract: In one embodiment, a service receives a device registration request sent by an endpoint device, wherein the endpoint device executes an onboarding agent that causes the endpoint device to send the device registration request via a cellular connection to a private access point name (APN) associated with the service. The service verifies that a network address of the endpoint device from which the device registration request was sent is associated with an integrated circuit card identifier (ICCID) or international mobile equipment identity (IMEI) indicated by the device registration request. The service identifies a tenant identifier associated with the ICCID or IMEI. The service sends, based on the tenant identifier, a device registration response to the endpoint device via the private APN.

Abstract: The present disclosure is directed to systems and techniques for providing zero-touch deployment (ZTD) and/or adaptive network traffic control policy management for deployed Internet-of-Things (IoT) devices. In one example, the systems and techniques can include obtaining a network traffic policy from a network traffic control service and obtaining one or more data usage policies from an IoT hub. Data usage measurements can be obtained for a plurality of IoT devices. One or more IoT device traffic policies can be automatically generated based at least in part on the network traffic policy, the one or more data usage policies, and the data usage measurements. The IoT device traffic policies can be used to provision or configure at least a portion of the plurality of IoT devices.

Abstract: Disclosed are techniques for dynamically creating policy-based intermediate certificates to sign device certificates of devices deployed in an enterprise network using ZTD. In one aspect, a method includes receiving network policy information to be used for creating policy-based intermediate certificates, each one of the policy-based intermediate certificates being used by a network controller for signing devices certificates of a different cluster of connected IoT devices; receiving, from an IoT device, a request for registration with the network controller; based on identifying information of the IoT device included in the request, determining one of the policy-based intermediate certificates to sign a device certificate of the loT device; and transmitting, to the IoT device, the device certificate signed using the one of the policy-based intermediate certificates.

Abstract: The present disclosure is directed to systems and techniques for providing zero-touch deployment (ZTD) and/or adaptive network traffic control policy management for deployed Internet-of-Things (IoT) devices. In one example, the systems and techniques can include obtaining a network traffic policy from a network traffic control service and obtaining one or more data usage policies from an IoT hub. Data usage measurements can be obtained for a plurality of IoT devices. One or more IoT device traffic policies can be automatically generated based at least in part on the network traffic policy, the one or more data usage policies, and the data usage measurements. The IoT device traffic policies can be used to provision or configure at least a portion of the plurality of IoT devices.

Abstract: The present disclosure is directed to techniques for streamlining the process of configuring IoT devices during their onboarding to a network by eliminating the need for pre-provisioning IoT devices with zero-touch deployment (ZTD) specific configurations during manufacturing. In one aspect, a method includes receiving, from an IoT device connected to a ZTD service, a message for establishing a connection to the ZTD service; provisioning, at the zero-touch deployment service, the IoT device with ZTD specific configurations; and completing, at the zero-touch deployment service, initial bootstrapping of the IoT device to establish the connection to the ZTD service using the ZTD specific configurations.

Abstract: The present disclosure is directed to techniques for bootstrapping and certificate management of Internet of Things (IoT) devices using a zero-touch deployment (ZTD) service. In one aspect, a method of managing Internet of Thing (IoT) devices includes receiving, at an IoT management component, a bootstrapping request from an IoT device, the request including location information of the IoT device; receiving, from a controller, credential information for the IoT device; generating a policy for bootstrapping the IoT device based at least on the location information and the credential information; and sending the policy to the IoT device for the IoT device to complete the bootstrapping.

Abstract: In one embodiment, a service receives a device registration request sent by an endpoint device, wherein the endpoint device executes an onboarding agent that causes the endpoint device to send the device registration request via a cellular connection to a private access point name (APN) associated with the service. The service verifies that a network address of the endpoint device from which the device registration request was sent is associated with an integrated circuit card identifier (ICCID) or international mobile equipment identity (IMEI) indicated by the device registration request. The service identifies a tenant identifier associated with the ICCID or IMEI. The service sends, based on the tenant identifier, a device registration response to the endpoint device via the private APN.

Abstract: The present disclosure is directed to systems and techniques for providing zero-touch deployment (ZTD) and/or adaptive network traffic control policy management for deployed Internet-of-Things (IoT) devices. In one example, the systems and techniques can include obtaining a network traffic policy from a network traffic control service and obtaining one or more data usage policies from an IoT hub. Data usage measurements can be obtained for a plurality of IoT devices. One or more IoT device traffic policies can be automatically generated based at least in part on the network traffic policy, the one or more data usage policies, and the data usage measurements. The IoT device traffic policies can be used to provision or configure at least a portion of the plurality of IoT devices.

Abstract: In one embodiment, a service receives a device registration request sent by an endpoint device, wherein the endpoint device executes an onboarding agent that causes the endpoint device to send the device registration request via a cellular connection to a private access point name (APN) associated with the service. The service verifies that a network address of the endpoint device from which the device registration request was sent is associated with an integrated circuit card identifier (ICCID) or international mobile equipment identity (IMEI) indicated by the device registration request. The service identifies a tenant identifier associated with the ICCID or IMEI. The service sends, based on the tenant identifier, a device registration response to the endpoint device via the private APN.

Abstract: In one embodiment, a service receives a device registration request sent by an endpoint device, wherein the endpoint device executes an onboarding agent that causes the endpoint device to send the device registration request via a cellular connection to a private access point name (APN) associated with the service. The service verifies that a network address of the endpoint device from which the device registration request was sent is associated with an integrated circuit card identifier (ICCID) or international mobile equipment identity (IMEI) indicated by the device registration request. The service identifies a tenant identifier associated with the ICCID or IMEI. The service sends, based on the tenant identifier, a device registration response to the endpoint device via the private APN.