Establishing ownership of dual route processors (RPs) using secure zero-touch provisioning (ZTP)

A device, the device comprising:

• a plurality of hardware modules;
• and
• one or more computer-readable non-transitory storage media comprising instructions that, when executed by processing circuitry of a hardware module of the plurality of hardware modules, cause the hardware module to perform operations comprising:
• obtaining a plurality of serial numbers associated with the plurality of hardware modules, respectively, wherein each hardware module is associated with a respective serial number;
• obtaining one or more ownership vouchers corresponding to the plurality of serial numbers by sending, to a provisioning system, a request comprising multiple serial numbers of the plurality of serial numbers;
• verifying, for a particular hardware module of the plurality of hardware modules, whether to trust the particular hardware module based at least in part on the one or more ownership vouchers;
• detecting an additional hardware module;
• determining whether the additional hardware module passes a validation procedure;
• and
• determining a type of action to perform based on whether the additional hardware module passes the validation procedure.

One or more computer-readable non-transitory storage media embodying instructions that, when executed by a processor of a device comprising a plurality of hardware modules, cause performance of operations comprising:

• obtaining, by a hardware module of the plurality of hardware modules, a plurality of serial numbers associated with the plurality of hardware modules, respectively, wherein each hardware module is associated with a respective serial number;
• obtaining one or more ownership vouchers corresponding to the plurality of serial numbers by sending, to a provisioning system, a request comprising multiple serial numbers of the plurality of serial numbers;
• verifying, for a particular hardware module of the plurality of hardware modules, whether to trust the particular hardware module based at least in part on the one or more ownership vouchers;
• detecting an additional hardware module;
• determining whether the additional hardware module passes a validation procedure;
• and
• determining a type of action to perform based on whether the additional hardware module passes the validation procedure.