# Secure boot with auto-signing in ESP RainMaker OTA

DevFeed: [Secure boot with auto-signing in ESP RainMaker OTA](<https://devfeed.tech/articles/secure-boot-with-auto-signing-in-esp-rainmaker-ota-13952.md>)

Original publisher: [Read original article](<https://developer.espressif.com/blog/secure-boot-with-auto-signing-in-esp-rainmaker-ota/>)

Author: John Lee

Published: 2024-07-29T00:00:00Z

Content type: article

Language: en

Sources: [Blog on Developer Portal](<https://devfeed.tech/sources/blog-on-developer-portal.md>)

Topics: [Esp Rainmaker](<https://devfeed.tech/topics/esp-rainmaker.md>), [Internet of things](<https://devfeed.tech/topics/iot.md>), [Security](<https://devfeed.tech/topics/security.md>), [Espressif](<https://devfeed.tech/topics/espressif.md>), [Cloud](<https://devfeed.tech/topics/cloud.md>), [Hardware](<https://devfeed.tech/topics/hardware.md>), [ESP-IDF](<https://devfeed.tech/topics/esp-idf.md>)

Tags: [blog](<https://devfeed.tech/tags/blog.md>), [developer](<https://devfeed.tech/tags/developer.md>), [encryption](<https://devfeed.tech/tags/encryption.md>), [esp-idf](<https://devfeed.tech/tags/esp-idf.md>), [esp-rainmaker](<https://devfeed.tech/tags/esp-rainmaker.md>), [esp32](<https://devfeed.tech/tags/esp32.md>), [espressif](<https://devfeed.tech/tags/espressif.md>), [fips](<https://devfeed.tech/tags/fips.md>), [hardware](<https://devfeed.tech/tags/hardware.md>), [iot](<https://devfeed.tech/tags/iot.md>), [management](<https://devfeed.tech/tags/management.md>), [ota](<https://devfeed.tech/tags/ota.md>), [private-key](<https://devfeed.tech/tags/private-key.md>), [rainmaker](<https://devfeed.tech/tags/rainmaker.md>), [secure-boot](<https://devfeed.tech/tags/secure-boot.md>), [signing](<https://devfeed.tech/tags/signing.md>), [verification](<https://devfeed.tech/tags/verification.md>)

## AI overview

This article explains how ESP RainMaker's Secure Signing feature manages secure boot keys and automatically signs firmware during OTA upgrades. It describes cloud-based key management, device-specific signing, and role separation for fleet management.

## Source excerpt

Security is one of the most important aspects of any IoT system and at Espressif, we take it very seriously. The ESP RainMaker platform offers a secure way to onboard a device onto Wi-Fi network and then control and monitor it through cloud. However, the security of the hardware itself is also critical for the overall system to be secure. Espressif MCUs come with various security features like secure boot, flash encryption, etc.