Practical Internet of Things Security - Second Edition

Local access

There are times when local access to the device is required for administration purposes. This may require the provisioning of SSH keys or administrative passwords. In the past, organizations frequently made the mistake of sharing administrative passwords to allow ease of access to devices. This is not a recommended approach, although implementing a federated access solution for administrators can be daunting. This is especially true when devices are spread across wide geographic distances, various sensors, gateways, and other unattended devices in the transportation industry. Under no circumstances should common passwords and keys be used in a device family (that is, default published passwords) for any initial or follow-on authentication. ...