Authentication

Status: DRAFT

Device -> backend

Current mechanisms:

• VPN authentication
• NATS JWT authentication

TODO: document the exact key hierarchy and provisioning process.

Human/operator -> backend

TODO: document user authentication, MFA policy and privileged access.

Local device access

TODO: document SSH/local console status in production builds.

Production devices must not use shared default passwords.