An aggregation device, comprising: a reply-reception module, stored in memory, that receives, from a satellite device, an authentication reply that: includes an original authentication message digitally signed by the aggregation device using a private key of the aggregation device; and is digitally signed by the satellite device using a private key of the satellite device; a forwarding module, stored in memory, that forwards the authentication reply to a network management server; a validation-reception module, stored in memory, that receives, from the network management server in response to forwarding the authentication reply, a validation message that: includes the original authentication message decrypted, by the network management server, using a public key of the aggregation device; includes the authentication reply decrypted, by the network management server, using a public key of the satellite device; and is digitally signed by the network management server using a private key of the network management server; an authentication module, stored in memory, that authenticates the satellite device based at least in part on receiving the validation message; and at least one physical processor configured to execute the reply-reception module, the forwarding module, the validation-reception module, and the authentication module. a reply-reception module, stored in memory, that receives, from a satellite device, an authentication reply that: includes an original authentication message digitally signed by the aggregation device using a private key of the aggregation device; and is digitally signed by the satellite device using a private key of the satellite device; includes an original authentication message digitally signed by the aggregation device using a private key of the aggregation device; and is digitally signed by the satellite device using a private key of the satellite device; a forwarding module, stored in memory, that forwards the authentication reply to a network management server; a validation-reception module, stored in memory, that receives, from the network management server in response to forwarding the authentication reply, a validation message that: includes the original authentication message decrypted, by the network management server, using a public key of the aggregation device; includes the authentication reply decrypted, by the network management server, using a public key of the satellite device; and is digitally signed by the network management server using a private key of the network management server; includes the original authentication message decrypted, by the network management server, using a public key of the aggregation device; includes the authentication reply decrypted, by the network management server, using a public key of the satellite device; and is digitally signed by the network management server using a private key of the network management server; an authentication module, stored in memory, that authenticates the satellite device based at least in part on receiving the validation message; and at least one physical processor configured to execute the reply-reception module, the forwarding module, the validation-reception module, and the authentication module.