BRSKI overview
BRSKI defines and open IETF specification that securely on boards a device to a "security domain"
Joining security domain is manifest, within the provisioning of a an appropriately signed certificate on the target device.
The joining of a security domain is then dovetailed wiht the physical provisioning of network credentials on a device. This can be different for each network type.
The initial work in this area has focussed on the onboarding onto WIFI networks, specifically using EAP-TLS as the network provisioning method. As the development matures, these protocols will be asbtract3ed and refined to work over many network types.