Zero-touch provisioning (ZTP) is an automated onboarding process that enrolls a new device and pushes its initial configuration with little or no manual setup. In enterprise networks, ZTP is used to speed deployment, standardize settings, and reduce hands-on administration when many devices must be brought online quickly.
ZTP matters in cyber security because it sits at a trust boundary: it decides whether a device is accepted, identified, and configured by the management system. If an attacker can tamper with ZTP, they may be able to alter device configuration, redirect enrollment, or gain a foothold in the management plane. Defenders should treat provisioning services as sensitive attack surface, secure controller access, segment management traffic, verify enrollment events, and patch ZTP components promptly. A flaw in ZTP can affect more than one device because it influences how the entire fleet is trusted from the start.