Secure Boot Explained: Building Trust & Security in IoT Devices | You're STILL not ready for the CRA

What is Secure Boot, why is it essential for IoT security, and how does it help establish trust between connected devices? In this presentation, Microchip's Ian Pearson introduces the fundamentals of Secure Boot, exploring its role in protecting connected devices against unauthorised code, compromised software updates and cyber security vulnerabilities. Filmed at the IoT Security Foundation's 'You're STILL not ready for the CRA' event in October 2026, this introductory session examines how Secure Boot establishes a Root of Trust and creates a Chain of Trust, ensuring that devices run authenticated and verified software. Using practical examples, Ian explores the security risks associated with device-to-server communications, the importance of software integrity and authentication, and the challenges of implementing Secure Boot across different hardware platforms and use cases. Key topics covered include: Why Secure Boot matters for connected device security Understanding the Root of Trust and Chain of Trust Preventing unauthorised firmware and malicious software updates Device authentication, integrity verification and trusted communications Secure Boot considerations within the EU Cyber Resilience Act (CRA), IEC 62443 and ISO/SAE 21434 Practical implementation challenges across different IoT devices Why Secure Boot must form part of a wider Secure Development Lifecycle and secure supply chain The presentation highlights why Secure Boot is a critical foundation for establishing verifiable trust, while emphasising that effective product security requires a combination of technical safeguards, secure development practices and supply chain assurance. The slides from this presentation are available on the IoTSF's members' platform: Plenary, Docs & Files, You're STILL not ready for the CRA 'You're STILL not ready for the CRA' took place at the London premises of, and in partnership with, SafeShark. It followed the 'You're not ready for the CRA' event in July 2026. About the IoT Security Foundation The IoT Security Foundation (IoTSF) is dedicated to making connected technology secure, helping organisations adopt best practices, strengthen product security and build trust in the Internet of Things. Find out more: https://www.iotsecurityfoundation.org/ #SecureBoot #IoTSecurity #CyberSecurity #IoTSF #RootOfTrust #EmbeddedSecurity #FirmwareSecurity #CyberResilienceAct #ConnectedDevices #ProductSecurity