Reimaging endpoint devices, and securely managing credentials for the same

A system for securely and automatically provisioning devices, wherein the system comprises:

• an API that is configured to (i) generate a token associated with a runtime image of one or more software applications, and (ii) store the runtime image and associated token in a runtime image repository, wherein the runtime image repository is configured to store and make available over a network the runtime image and associated token;
• and
• an endpoint device that includes memory and one or more processors, wherein the memory includes instructions that, when executed, perform operations comprising:
• obtaining a new runtime image and associated token from the runtime image repository;
• installing the new runtime image in the memory;
• generating a password for the new runtime image installed on the endpoint device;
• and
• transmitting image installation data for the endpoint device to the API, wherein the installation data includes the password, the associated token, and a unique identifier for the endpoint device;
• wherein the API is further configured to (i) validate the image installation data with the runtime image repository, based on the associated token, and (ii) perform a write-only operation to store the password in a secure credential repository upon validation by the runtime image repository.