When an IoT device connects to the cloud, how do we know it is a device we should trust? How do we know the device is running the intended firmware. How does the device know that it can trust the cloud service? How does the lifecycle of a device affect its identity. The bootloader plays a key role in establishing this trust.

In this presentation, David Brown will cover the notion of trust and identity as it relates to the initial bootloader. What is meant by “root of trust”. The talk will cover various aspects of identity, including: secure boot, attestation, device identity, and provisioning. Although MCUboot will be used for specific examples, the presentation is generally applicable.