Zero-Touch Provisioning (ZTP) is a device setup method that lets network hardware automatically enroll and download its initial configuration with little or no manual handling. Instead of an administrator touching each unit during deployment, the device contacts a trusted provisioning system, proves its identity, and receives the settings it needs to operate.
In cyber security, ZTP matters because it moves trust into the enrollment path. If an attacker can abuse provisioning logic, authentication checks, or controller access, they may be able to register a rogue device, alter configuration, or redirect policy at scale. Defenders should treat onboarding as a high-value event: use strong device identity, segment management traffic, restrict controller access, and log provisioning activity and configuration pushes. In short, ZTP is efficient, but its convenience makes the trust chain worth protecting carefully.