An apparatus for Internet of Things, loT, communications, comprising: a first loT device (341-343, 441, 541, 641), including: a memory adapted to store run-time data for the first loT device; and at least one processor that is adapted to execute processor-executable code that, in response to execution, enables the first loT device to perform actions, including: upon an initial boot, automatically sending identification information stored in the first loT device to a provisioning service endpoint (311, 312, 411, 511, 611) in order for the loT provisioning service endpoint to register the first loT device to an loT hub, wherein the identification information includes an identification, ID, of the first loT device; receiving cryptographic information (426, 427) from the provisioning service endpoint, wherein the cryptographic information is associated with the loT hub selected from a plurality of loT hubs (351-353, 451, 551, 552, 651, 652) based, in part, on the registration of the ID of the first loT device from the provisioning service endpoint at the loT hub; automatically sending a message to the loT hub in response to receiving the cryptographic information; based on the message, receiving a new configuration file and a firmware update from the loT hub without requiring a user association; and automatically installing the new configuration file and the firmware update. a memory adapted to store run-time data for the first loT device; and at least one processor that is adapted to execute processor-executable code that, in response to execution, enables the first loT device to perform actions, including: upon an initial boot, automatically sending identification information stored in the first loT device to a provisioning service endpoint (311, 312, 411, 511, 611) in order for the loT provisioning service endpoint to register the first loT device to an loT hub, wherein the identification information includes an identification, ID, of the first loT device; receiving cryptographic information (426, 427) from the provisioning service endpoint, wherein the cryptographic information is associated with the loT hub selected from a plurality of loT hubs (351-353, 451, 551, 552, 651, 652) based, in part, on the registration of the ID of the first loT device from the provisioning service endpoint at the loT hub; automatically sending a message to the loT hub in response to receiving the cryptographic information; based on the message, receiving a new configuration file and a firmware update from the loT hub without requiring a user association; and automatically installing the new configuration file and the firmware update. upon an initial boot, automatically sending identification information stored in the first loT device to a provisioning service endpoint (311, 312, 411, 511, 611) in order for the loT provisioning service endpoint to register the first loT device to an loT hub, wherein the identification information includes an identification, ID, of the first loT device; receiving cryptographic information (426, 427) from the provisioning service endpoint, wherein the cryptographic information is associated with the loT hub selected from a plurality of loT hubs (351-353, 451, 551, 552, 651, 652) based, in part, on the registration of the ID of the first loT device from the provisioning service endpoint at the loT hub; automatically sending a message to the loT hub in response to receiving the cryptographic information; based on the message, receiving a new configuration file and a firmware update from the loT hub without requiring a user association; and automatically installing the new configuration file and the firmware update.