Secure IoT Bootstrapping: A Survey

Document Type Expired Internet-Draft (individual)
Authors Mohit Sethi  , Behcet Sarikaya  , Dan Garcia-Carillo 
Last updated 2020-09-10 (latest revision 2020-03-09)
Stream (None)
Intended RFC status (None)
Expired & archived
pdf htmlized (tools) htmlized bibtex
Stream Stream state (No stream defined)
Consensus Boilerplate Unknown
RFC Editor Note (None)
IESG IESG state Expired
Telechat date
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft can be found at


This draft provides an overview of the various terms that are used when discussing bootstrapping of devices. We document terms that have been used within the IETF as well as other standards bodies. We investigate if the terms refer to the same phenomena or have subtle differences. We provide recommendations on the applicability of terms in different contexts. Finally, this document presents a survey of secure bootstrapping mechanisms available for smart objects that are part of an Internet of Things (IoT) network. The survey does not prescribe any one mechanism and rather presents IoT developers with different options to choose from, depending on their use-case, security requirements, and the user interface available on their smart objects.


Mohit Sethi (
Behcet Sarikaya (
Dan Garcia-Carillo (

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)