A Day in The Life of the Pledge

• Device is provisioned with 802.1AR IDevID
• Private key unique!
• MASA anchor installed

• When deployed, Pledge authenticates with IDevID
• Network authenticated itself with Voucher
• Pledge receives Domain-Specific LDevID via Enrollment over Secure Transport