At what point to install the key and certificate on the iot device?

Question

Electronics

I am writing a firmware for an iot device and the question arose of how it is customary to install keys on devices: hardcode into the firmware, or receive from some server, or, having an android application for the device, transmit via bluetooth? Key and certificate are needed for tls connection with mqtt broker.

Answer 1

The best option from a security point of view is to generate a key pair and a certificate request (CSR) directly on the device, rather than uploading it from outside or hardcoding. But this requires a good random number generator, and even a specialized chip is better.

Answer 2

depending on what you have in mind and why do you need keys with certificates.
for example, poppy addresses are pushed into network devices ahead of time so that they can be clearly distinguished later.
clairvoyants have long fled to RENTV.