Device identity and attestation.

Technologies

• Trusted Platform Module A hardware root of trust that holds keys, measures boot and signs attestation evidence.
• DICE layered identity Device identity derived from each firmware layer for microcontrollers without a TPM.
• Secure device identifiers Factory-installed and locally significant device identities bound to hardware.
• Remote attestation architecture Roles of attester, verifier and relying party, so trust in a node is evidence-based.
• Entity Attestation Tokens Signed claims about a device's state carried as CWT or JWT.
• Secure elements Tamper-resistant chips that store credentials on constrained devices.
• Physically unclonable functions Keys derived from silicon variation rather than stored, resisting extraction.
• Zero-touch secure onboarding Devices proving their identity to the owner's network without shared secrets in the field.