Fast IDentity Online (FIDO) is the organization that has established the FIDO device on-boarding (FDO) specification which solves two key IoT security challenges: supply chain security and passwords without physical users. The FDO was developed by the FIDO Alliance based on the same guiding principles of convenience, security, and privacy used for FIDO authentication.
FDO and Dell's unique position of owning the hardware, firmware, and the operating environment provides a secure supply chain from point of ordering to point of delivery for NativeEdge Endpoints. All that customers need to care about is the eventual application that will be running at these endpoints. Dell Validated Designs for the edge can be delivered to endpoints in a trusted manner.
The following figure shows how endpoints and vouchers are sent to customers along different paths to ensure security from manufacturing all the way to receipt and installation of the endpoint:
- A logistical path where the endpoint is shipped from Dell manufacturing to the end location.
- An IT path where the voucher travels from manufacturing to the end location.
When the two join again, trust is enabled by the combination of the endpoint, the authenticity of which is validated by SCV, and the voucher which confers ownership. Only if trust has been verified can workloads be trusted. This assures confidence that this device was built by Dell and is allowed to run the workload assigned to it by its trusted owner.
![Ensuring security from manufacturing](/static/media/9198938f-8c47-5a0e-82d9-6db6a62cd3f7/DAM-b09bb69a-e771-4560-8b30-a28ab48636be/out/Ensuring security from manufacturing=GUID-9473EB6D-2A81-4E7A-8D09-D0DA1FC30A51=1=en-us=Low.png)