RFC 9124

A Manifest Information Model for Firmware Updates in Internet of Things (IoT) Devices, January 2022

File formats:

icon for HTML icon for text file icon for v3pdf icon for XML
Status:
INFORMATIONAL
Authors:
B. Moran
H. Tschofenig
H. Birkholz
Stream:
IETF
Source:
suit (sec)

Cite this RFC: TXT  |  XML

DOI:  10.17487/RFC9124

Discuss this RFC: Send questions or comments to suit@ietf.org

Other actions: Submit Errata  |  Find IPR Disclosures from the IETF  |  View History of RFC 9124


Abstract

Vulnerabilities with Internet of Things (IoT) devices have raised the need for a reliable and secure firmware update mechanism that is also suitable for constrained devices. Ensuring that devices function and remain secure over their service lifetime requires such an update mechanism to fix vulnerabilities, update configuration settings, and add new functionality.

One component of such a firmware update is a concise and machine-processable metadata document, or manifest, that describes the firmware image(s) and offers appropriate protection. This document describes the information that must be present in the manifest.


For the definition of Status, see RFC 2026.

For the definition of Stream, see RFC 8729.