Secure Zero Touch Provisioning (SZTP)

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 87
Abstract: This document presents a technique to securely provision a networking device when it is booting in a factory-default state. Variations in the solution enable it to be used on both public and private networks. The provisioning steps are able to update the boot image, commit an initial configuration, and execute arbitrary scripts to address auxiliary needs. The updated device is subsequently able to establish secure connections with other systems. For instance, a device may establish NETCONF (RFC 6241) and/or RESTCONF (RFC 8040) connections with deployment-specific network management systems.
Publication Date: 2019-04-01
Status Note: Proposed Standard
DOI: 10.17487/RFC8572
Link: https://doi.org/10.17487/RFC8572
Author(s): Kent Watsen
Ian Farrer
Mikael Abrahamsson
Keyword(s): Zero Touch, Booting

Latest version of IETF RFC 8572

Document Versions — IETF RFC 8572

▶ IETF RFC 8572 (2019-04-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IEEE.STD802.1AR — IEEE, "IEEE Standard for Local and metropolitan area networks - Secure Device Identity", IEEE 802.1AR. EXTERNAL
IETF RFC 1035 [Active, Amended*]
IETF RFC 2119 [Active*]
IETF RFC 2782 [Active*]
IETF RFC 3396 [Active*]
IETF RFC 4253 [Active*]
IETF RFC 5280 [Active, Amended*]
IETF RFC 5652 [Active*]
IETF RFC 6020 [Active*]
IETF RFC 6125 [Superseded*]
IETF RFC 6762 [Active*]
IETF RFC 6991 [Superseded*]
IETF RFC 7227 [Active*]
IETF RFC 7230 [Superseded*]
IETF RFC 7950 [Active, Amended*]
IETF RFC 8040 [Active*]
IETF RFC 8174 [Active*]
IETF RFC 8366 [Active*]
IETF RFC 8415 [Superseded*]
IETF RFC 8552 [Active*]
T-REC-X.690.2015 — ITU-T-X.690 EXTERNAL

Bibliographic Reference(s)

IETF.draft-ietf-netconf-crypto-types-05 — YANG-CRYPTO-TYPES EXTERNAL
IETF.draft-ietf-netconf-trust-anchors-03 — YANG-TRUST-ANCHORS EXTERNAL
IETF.draft-ietf-ntp-using-nts-for-ntp-18 — NTS-NTP EXTERNAL
IETF RFC 3688 [Active*]
IETF RFC 4250 [Active*]
IETF RFC 6187 [Active*]
IETF RFC 6234 [Active*]
IETF RFC 6241 [Active*]
IETF RFC 6335 [Active*]
IETF RFC 6698 [Active*]
IETF RFC 6763 [Active*]
IETF RFC 6891 [Active*]
IETF RFC 6960 [Active*]
IETF RFC 7107 [Active*]
IETF RFC 7766 [Active*]
IETF RFC 8071 [Active*]
IETF RFC 8259 [Active*]
IETF RFC 8340 [Active*]
IETF RFC 8341 [Active*]
IETF RFC 8446 [Superseded*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC8572.json

Amended by:

RFC9646 NOT IN REGISTRY

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 8572, Secure Zero Touch Provisioning (SZTP). Available at https://doi.org/10.17487/RFC8572

Snippet:

IETF RFC 8572, Secure Zero Touch Provisioning (SZTP). Available at https://doi.org/10.17487/RFC8572

HTML (ISO 690 compliant)

Preview:

IETF RFC 8572, Secure Zero Touch Provisioning (SZTP). Available at https://doi.org/10.17487/RFC8572

Snippet:

<span class="citation"><cite>IETF RFC 8572</cite>, Secure Zero Touch Provisioning (SZTP). Available at <a href="https://doi.org/10.17487/RFC8572" target="_blank" rel="noopener">https://doi.org/10.17487/RFC8572</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 8572, Secure Zero Touch Provisioning (SZTP)
doi: 10.17487/RFC8572
url: https://doi.org/10.17487/RFC8572

Snippet:

<li>
<cite id="bib-rfc8572">IETF RFC 8572</cite>, Secure Zero Touch Provisioning (SZTP)
<span class="doi">10.17487/RFC8572</span>
</li>

Referenced By

IETF RFC 8994 [Active*]
IETF RFC 9483 [Active*]
IETF RFC 9810 [Active*]