Postgraduate Diploma in Provisioning, Device Mgmt and OTA
Online Postgraduate Diploma of 800 h in provisioning, Device Mgmt and OTA. 8 modules covering IETF RFC 9019, OMA LwM2M 1.2 and Mender. Assigned tutor and open enrolment.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Understand the complete lifecycle of the connected device.
Design secure provisioning processes at scale.
Implement device management with LwM2M.
Develop robust OTA mechanisms with signing and rollback.
Plan staged rollouts across heterogeneous fleets.
Monitor the health and configuration of device fleets.
Apply the regulatory requirements for security and updates.
Who it's for
- Firmware engineer wishing to specialise in Provisioning, Device Mgmt and OTA.
- IoT platform architect wishing to specialise in Provisioning, Device Mgmt and OTA.
- Device DevOps engineer wishing to specialise in Provisioning, Device Mgmt and OTA.
- Device security specialist wishing to specialise in Provisioning, Device Mgmt and OTA.
- Fleet operations manager wishing to specialise in Provisioning, Device Mgmt and OTA.
- Embedded systems engineer wishing to specialise in Provisioning, Device Mgmt and OTA.
- Engineering or science graduates seeking to enter consumer electronics.
What you'll work with
- IETF RFC 9019
- OMA LwM2M 1.2
- ETSI EN 303 645
- IETF RFC 8995
- IETF RFC 7030
- UNECE R156
- IEC 62443-4-2
- Reglamento (UE) 2024/2847
8 modules · 800 h
1.1Manufacturing, deployment and decommissioning phases1.2Device identity and root of trust1.3Secure boot and chain of trust1.4Fleet inventory and registration1.5Operating states and basic telemetry1.6ETSI EN 303 645 requirements1.7Obligations under the Cyber Resilience Act1.8Threat models across the lifecycle1.9Centralised management architectures1.10Case study: lifecycle of an IoT sensor
2.1Credential injection at the factory2.2Secure elements and TPM2.3Zero-touch provisioning2.4BRSKI protocol and vouchers2.5Certificate enrolment with EST2.6DPS services in the cloud2.7Wi-Fi and BLE provisioning2.8Supply chain management2.9Credential rotation and revocation2.10Laboratory: provisioning with EST
3.1OMA LwM2M architecture3.2IPSO objects and resources3.3Bootstrap and registration3.4Read, write and execute operations3.5Observation and notifications3.6CoAP and DTLS transport3.7Queue mode for sleeping devices3.8Eclipse Leshan server3.9Comparison with TR-069 and USP3.10Practical: LwM2M client with Zephyr
4.1SUIT architecture according to RFC 90194.2Update manifests and metadata4.3A/B and copy schemes4.4MCUboot bootloaders4.5Delta updates and compression4.6Image signing and verification4.7Rollback protection4.8Recovery from power failures4.9Updating radio modules4.10Laboratory: OTA with MCUboot
5.1Updating Linux systems with Mender5.2Redundant partitions and RAUC5.3Updating containers at the edge5.4Staged and canary rollouts5.5Fleet segmentation by groups5.6Bandwidth and schedule management5.7Update success telemetry5.8Automatic rollback5.9UNECE R156 and SUMS requirements5.10Workshop: canary rollout on a simulated fleet
6.1Device health indicators6.2Shadows and device twins6.3Remote commands and jobs6.4Remote logging and diagnostics6.5Configuration management6.6Alarms and response policies6.7Scalability of IoT platforms6.8Operating costs per device6.9Decommissioning and secure erasure6.10Practical: fleet health dashboard
7.1IEC 62443-4-2 requirements for devices7.2Secure development lifecycle IEC 62443-4-17.3Vulnerability management and SBOM7.4Coordinated vulnerability disclosure7.5Auditing update processes7.6Device data privacy7.7Penetration testing of the OTA channel7.8Evidence for certification7.9Sector requirements in automotive and healthcare7.10Case study: OTA process audit
8.1Definition of the product and fleet8.2Provisioning design8.3Management protocol selection8.4OTA architecture and manifests8.5Staged rollout plan8.6Security and compliance plan8.7Recovery testing from failures8.8Operational indicators8.9Report and presentation8.10Final review with the tutor
How you'll learn
100 % online training on the SEIUM campus, with downloadable material, recorded classes and assigned technical tutor. No fixed timetables: students progress at their own pace within the intake, which makes it possible to combine with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Mender, MCUboot, Eclipse Leshan, AWS IoT Device Management, Azure IoT Hub Device Provisioning Service, in free, academic or evaluation versions. Tests are studied on real OTA update procedures with power interruption, zero-touch provisioning on the bench, and canary deployment on a test fleet. Assessment is continuous per module plus the final integrating project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Understand the complete lifecycle of the connected device.
Design secure provisioning processes at scale.
Implement device management with LwM2M.
Develop robust OTA mechanisms with signing and rollback.
Plan staged rollouts across heterogeneous fleets.
Where this takes you
Requirements
- Prior technical training or professional experience in the sector. No university degree is required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient level of Spanish to follow technical regulatory documentation.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 800 hours, spread over 6 to 8 months. That is between 10 and 15 hours per week on average, compatible with a full-time job.
You work with Mender, MCUboot, Eclipse Leshan, AWS IoT Device Management, Azure IoT Hub Device Provisioning Service. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
A SEIUM own diploma upon passing continuous assessment and the integrating project. It is in-house training, not an official qualification from the Ministry.
Yes. Modules passed in a course or diploma in the same area are credited towards the advanced programme. Check the credit transfer policy when you enrol.
Related programmes
Diploma in Mixed-Criticality and Temporal Verification
Online postgraduate diploma of 800 hours in mixed-criticality and timing verification. 8 modules covering mixed-criticality scheduling, multicore interference, temporal partitioning, model-based and measurement-based timing verification and…
Postgraduate Diploma in ISO 13485, QMS and Validation
Online Postgraduate Diploma of 800 h in ISO 13485, QMS and Validation. 8 modules covering ISO 13485:2016, Regulation (EU) 2017/745 and Greenlight Guru. Assigned tutor and…
Diploma in Safety Islands and Real-Time Monitoring
Online postgraduate diploma of 800 hours in safety islands and real-time monitoring. 8 modules covering SoC functional safety architectures, hardware fault analysis, hardware detection mechanisms, real-time…
More in Electronics, Embedded Systems & Telecom
All Electronics, Embedded Systems & Telecom programmes → · How to apply · Fees & financing · Scholarships