Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST CSWP 42

Towards Automating IoT Security: Implementing Trusted Network-Layer Onboarding

Date Published: November 25, 2025

Author(s)

Michael Fagan (NIST), Jeffrey Marron (NIST), Murugiah Souppaya (NIST), Paul Watrobski (NIST), Karen Kent (Trusted Cyber Annex), Blaine Mulugeta (MITRE), Susan Symington (MITRE)

Abstract

Keywords

application-layer onboarding; bootstrapping; FIDO; Internet of Things (IoT); Manufacturer Usage Description (MUD); Matter; network-layer onboarding; onboarding; Wi-Fi Easy Connect
Control Families

None selected

Documentation

Publication:
https://doi.org/10.6028/NIST.CSWP.42
Download URL

Supplemental Material:
Project homepage

Related NIST Publications:
SP 1800-36
IR 8350

Document History:
04/14/25: CSWP 42 (Draft)
11/25/25: CSWP 42 (Final)