Practical Internet of Things Security - Second Edition

Trust stores

We will diverge momentarily from infrastructure to discuss where the PKI-provisioned credentials end up being stored in devices. They are frequently stored in internal trust stores. Trust stores are an essential IoT capability with regard to the protection of digital credentials. From a PKI perspective, a device's trust store is a physical or logical part of the IoT device that securely stores public and private keys, often (and better when) encrypted. Various types of cryptographic modules can function as trust stores. Within them, both the device's private/public keys and its PKI roots of trust are stored.

Trust stores tend to be strongly access-controlled sections of memory, often only accessible from OS kernel-level processes, ...