Gateway deployment for a zero trust environment

A system comprising:

• an identity management platform comprising one or more servers supporting authentication in a zero trust network environment;
• and
• a threat management facility for an enterprise network, the threat management facility hosted on a cloud computing platform and the threat management facility including a processor and memory storing computer executable instructions that configure the threat management facility to perform the steps of:
• retrieving a base image for a zero trust network access gateway, the base image including a bootable image of the zero trust network access gateway,
• retrieving configuration information including a client identifier for the zero trust network access gateway from the threat management facility,
• retrieving a one-time passcode for the client identifier from the identity management platform,
• creating a supplemental drive image for the zero trust network access gateway, the supplemental drive image including the configuration information and the one-time passcode for the zero trust network access gateway, and
• causing the zero trust network access gateway to boot from the base image and the supplemental drive image, wherein the zero trust network access gateway is configured to register with the threat management facility using the client identifier and the one-time passcode stored on the supplemental drive image.

A computer program product comprising a non-transitory computer readable medium that includes computer executable code that, when executing on one or more computing devices, performs the steps of:

• retrieving a bootable image for a managed device;
• retrieving configuration information including a client identifier for the managed device from a threat management facility;
• retrieving a one-time passcode for the client identifier from an identity management platform;
• creating a supplemental drive image for the managed device, the supplemental drive image including the configuration information and the one-time passcode for the managed device;
• and
• causing the managed device to boot from the bootable image and the supplemental drive image, wherein the managed device is configured to register with the threat management facility using the client identifier and the one-time passcode stored on the supplemental drive image.