'%3e%3crect%20width='64'%20height='64'%20fill='url(%23fk)'/%3e%3crect%20width='64'%20height='64'%20fill='url(%23bk)'/%3e%3c!--%20Concentric%20radar%20rings%20--%3e%3cpath%20d='M64.0%2014.0A14%2014%200%200%201%2050.0%200.0'%20fill='none'%20stroke='%23fff'%20stroke-opacity='.25'%20stroke-width='1.3'/%3e%3cpath%20d='M64.0%2024.0A24%2024%200%200%201%2040.0%200.0'%20fill='none'%20stroke='%23fff'%20stroke-opacity='.25'%20stroke-width='1.3'/%3e%3cpath%20d='M64.0%2034.0A34%2034%200%200%201%2030.0%200.0'%20fill='none'%20stroke='%23fff'%20stroke-opacity='.25'%20stroke-width='1.3'/%3e%3cpath%20d='M64.0%2044.0A44%2044%200%200%201%2020.0%200.0'%20fill='none'%20stroke='%23fff'%20stroke-opacity='.25'%20stroke-width='1.3'/%3e%3cpath%20d='M64.0%2054.0A54%2054%200%200%201%2010.0%200.0'%20fill='none'%20stroke='%23fff'%20stroke-opacity='.25'%20stroke-width='1.3'/%3e%3c!--%20Thicker,%20high-visibility%20signal%20lime%20arc%20(stroke-width%205.2%20for%20small%20navbar%20display)%20--%3e%3cpath%20d='M54.8%2033.2A34%2034%200%200%201%2030.2%206.5'%20fill='none'%20stroke='%23C8F55B'%20stroke-width='5.2'%20stroke-linecap='round'/%3e%3c/g%3e%3c/svg%3e)
Requirements
- Signed images, verified by the device before use.
- Rollback: keep the previous version and return to it if the new one fails.
- Atomic updates, so a power cut mid-update cannot leave a half-written device.
- Version checks, to stop downgrade attacks.
Rolling out
- Test on a bench and on a small internal group.
- Release to a small share of the fleet and watch health.
- Widen in stages; pause automatically on failures.
- Keep the ability to stop an update quickly.
Plan for the field
Devices have weak or intermittent links, low battery and limited storage. Make downloads resumable, schedule them for safe moments and report status back.
Sources and further reading
- IETF RFC 9019. A Firmware Update Architecture for Internet of Things. rfc-editor.org/rfc/rfc9019.
IICTP is a new independent credential and is not ISO/IEC 17024 accredited.