Question

A service provider is deploying hundreds of new IOS-XR routers to remote sites using Secure Zero Touch Provisioning (RFC 8572). During onboarding, each device must cryptographically verify that the bootstrap server it contacts is authorized by the true owner before applying any configuration. Which artifact provides this assurance by binding the device's serial number to its rightful owner and is signed by the device manufacturer?

Accepted Answer

The ownership voucher, a manufacturer-signed artifact that authenticates the owner to the device

Answer

The DHCP option 43 vendor-specific string pointing to the bootstrap server URL

Answer

The SNMPv3 engine ID negotiated during the discovery phase

Answer

The self-signed TLS certificate generated locally by the router at first boot