Microchip & The Things Industries Deliver End‑to‑End LoRaWAN Security for Trusted Key Provisioning

As the LoRa (Long Range) technology ecosystem accelerates, security remains a critical concern. Vulnerabilities that expose network and application server keys in the memory of modules and microcontrollers paired with a LoRaWAN stack leave devices open to impersonation and fraudulent transactions, risking substantial revenue loss, costly recovery, and brand damage.

In partnership with The Things Industries, Microchip Technology has introduced the industry’s first end‑to‑end security solution that delivers secure, trusted, and managed authentication to LoRaWAN devices at a global scale. The solution marries the MCU‑ and radio‑agnostic ATECC608A‑MAHTN‑T CryptoAuthentication device with The Things Industries’ managed join servers and Microchip’s secure provisioning service.

This joint offering dramatically simplifies LoRaWAN device provisioning and tackles the logistical challenges of managing authentication keys from inception through a device’s lifetime. Traditionally, network and application server keys are left unprotected on the edge node and unmonitored as devices traverse the supply chain and are field‑deployed. The Common Criteria Joint Interpretation Library (JIL) “high”‑rated ATECC608A is pre‑configured with secure key storage, keeping each device’s LoRaWAN secret keys isolated from the system so that sensitive data never leaks during manufacturing or deployment. Microchip’s secure manufacturing facilities provision keys in a controlled environment, while The Things Industries’ agnostic secure join server validates device identity before any network connection, drastically reducing the risk of device identity corruption.

Analogous to a prepaid mobile plan, every purchase of an ATECC608A‑MAHTN‑T includes one year of managed LoRaWAN join‑server service through The Things Industries. Once a device authenticates, the network contacts the join server to confirm it originates from a trusted device, then securely transmits temporary session keys to the chosen network and application servers. The join server supports any LoRaWAN network—from commercial operators to private, open‑source deployments—and offers an extension option after the initial year.

Microchip and The Things Industries have also streamlined the onboarding process. Device identities are claimed by the join server with minimal developer intervention, freeing teams from deep security expertise. Customers can choose any LoRaWAN network and, if desired, migrate to another join server by rekeying the device—eliminating vendor lock‑in and granting full control over key storage.

The ATECC608A’s MCU‑agnostic design allows pairing with any microcontroller and LoRa radio. Developers can build secure LoRaWAN devices by combining the ATECC608A with the SAM L21 MCU, supported by the Arm Mbed OS LoRaWAN stack, or the newly announced SAM R34 System‑in‑Package with Microchip’s LoRaWAN stack. For rapid prototyping, designers can use the CryptoAuthoXPRO socket board and The Things Industries provisioned parts in samples with the SAM L21 Xplained Pro (atsamd21‑xpro) or SAM R34 Xplained Pro (DM320111).