Authentication without pre-known credentials

A method for authenticating a new configuration of a network device, the method comprising:

• receiving the new configuration, a message authentication code that is generated using a data in the new configuration and a security key, wherein parts of the security key are stored in a plurality of communication nodes coupled with the network device;
• retrieving parts of the secret key from the plurality communication nodes;
• assembling the parts of the secret key;
• and
• generating a new message authentication code using the assembled secret key and comparing the message authentication code with the new message authentication code and upon a successful comparison, deploying the new configuration in the network device.

A network device, comprising:

• a switch fabrics configured to receive a new configuration and a message authentication code for the network device from a controller, wherein the message authentication code is generated using contents of the new configuration and a security key;
• a memory for at least temporarily storing the new configuration;
• a plurality of communication ports coupled with the switch fabrics, wherein the communication ports are configured to be coupled with a plurality of communication nodes;
• and
• wherein the switch fabrics is configured to retrieve parts of the security key from the plurality of communication ports and to reassemble the parts into an assembled security key, wherein the switch fabrics is configured to derive a new message authentication code using the assembled security key and the contents of the new configuration,
• wherein the switch fabrics is further configured to compare the new message authentication code with the message authentication code and deploy the new configuration upon a successful comparison.