Flexible device onboarding via bootstrap keys

A computer program product, comprising:

• a non-transitory computer-readable medium having computer-readable program instructions embodied thereon, the computer-readable instructions comprising computer-readable instructions to:
• communicate, by a registrar computing device to a candidate computing device, an authentication key;
• receive, by the registrar computing device from the candidate computing device, a signed voucher request comprising:
• a request to authenticate a network to which the candidate computing device will be able to connect, and
• an indication that the authentication key communicated by the registrar computing device matches an authentication key embedded in the firmware of the candidate computing device;
• provide, by the registrar computing device to an authorizing computing device, the signed voucher request;
• and
• receive, by the registrar computing device from the authorizing computing device, a signed voucher, wherein the signed voucher authenticates the network to which the candidate computing device will connect and is based on the indication that the authentication key communicated by the registrar computing device matches the authentication key embedded in the firmware of the candidate computing device.

A registrar computing system, comprising:

• a registrar computing system storage device;
• and
• a registrar computing system processor communicatively couple to the registrar computing system storage device, wherein the registrar computing system processor executes application code instructions that are stored in the registrar computing system storage device to cause the system to:
• communicate, to a candidate computing device, an authentication key;
• receive, from the candidate computing device, a signed voucher request comprising:
• a request to authenticate a network to which the candidate computing device will be able to connect, and
• an indication that the authentication key communicated by the registrar computing device matches an authentication key embedded in the firmware of the candidate computing device;
• provide, to an authorizing computing device, the signed voucher request;
• and
• receive, from the authorizing computing device, a signed voucher, wherein the signed voucher authenticates the network to which the candidate computing device will connect and is based on the indication that the authentication key communicated by the registrar computing device matches the authentication key embedded in the firmware of the candidate computing device.