Software Update
Ability to update IoT device software, and to have support mechanisms for such updates.
Update Capabilities
Ability to update the IoT device software within the device and/or through the IoT device interface. Elements that may be necessary:
- Ability to update the software by authorized entities only using a secure and configurable mechanism.
- Ability to identify the current version of the organizational audit policies and procedures governing the software update.
- Ability to restrict software installations to only authorized individuals or processes.
- Ability to restrict software changes/uninstallations to only authorized individuals or processes.
- Ability to verify software updates come from valid sources using an effective method (e.g., digital signatures, checksums, certificate validation, etc).
Update Application Support
- Ability to update the device’s software through remote (e.g., network download) and/or local (e.g., removable media) means
- If software updates are delivered and applied automatically:
- Ability to verify and authenticate any update before installing it
- Ability to enable or disable updating