Abstract: Presented herein are certificate-based techniques through which a Radio Interface Unit may be securely onboarded to a service provider network. In one example, a method is provided that includes obtaining, by a Dynamic Host Configuration Protocol (DHCP) server, an address assignment request for the, wherein the address assignment request comprises a vendor device certificate, a signed nonce, a non-encrypted serial number for the RIU, a signed serial number for the RIU, and a vendor identifier; validating the vendor device certificate, the signed nonce, and the signed serial number for the RIU based on a vendor root certification authority certificate; validating the non-encrypted serial number for the RIU; and generating an address assignment response based on validating the non-encrypted serial number for the RIU, the vendor device certificate, the signed nonce, and the signed serial number for the RIU.

Abstract: A first virtual machine executing on a centralized management node provides a first image file to a first computing entity arranged within a first point of delivery. The first image file includes a first boot configuration file or a first ramdisk file. A second virtual machine provides a second image file to a second computing entity arranged within a second point of delivery different from the first point of delivery. The second image file includes a second boot configuration file or a second ramdisk file. The first virtual machine provides a third image file to the first computing entity. The third image file comprises a first operating system installation file. The second virtual machine provides a fourth image file to the second computing entity. The fourth image file comprises a second operating system installation file.