A method to facilitate feature licensing of industrial devices employed in an industrial automation environment, the method comprising: provisioning a security certificate for an industrial device (130; 330) based on a first private key associated with the industrial device, wherein the first private key is securely stored in a hardware root of trust within the industrial device; generating a device information package for the industrial device based on the security certificate for the industrial device, wherein the device information package: is encrypted with a first public key paired with the first private key associated with the industrial device, is signed by a certificate authority using a second private key associated with the certificate authority, and comprises a license to enable one or more functions of the industrial device; providing the device information package to the industrial device; and issuing a revocation of the license to the industrial device, wherein the industrial device is configured to: validate the device information package using a second public key paired with the second private key associated with the certificate authority, decrypt the device information package with the first private key associated with the industrial device, enable the one or more functions of the industrial device based on the license included in the device information package, revoke the license to disable the one or more functions of the industrial device based on the revocation, and generate a record that indicates the license was revoked and sign the record using the first private key associated with the industrial device. provisioning a security certificate for an industrial device (130; 330) based on a first private key associated with the industrial device, wherein the first private key is securely stored in a hardware root of trust within the industrial device; generating a device information package for the industrial device based on the security certificate for the industrial device, wherein the device information package: is encrypted with a first public key paired with the first private key associated with the industrial device, is signed by a certificate authority using a second private key associated with the certificate authority, and comprises a license to enable one or more functions of the industrial device; is encrypted with a first public key paired with the first private key associated with the industrial device, is signed by a certificate authority using a second private key associated with the certificate authority, and comprises a license to enable one or more functions of the industrial device; providing the device information package to the industrial device; and issuing a revocation of the license to the industrial device, wherein the industrial device is configured to: validate the device information package using a second public key paired with the second private key associated with the certificate authority, decrypt the device information package with the first private key associated with the industrial device, enable the one or more functions of the industrial device based on the license included in the device information package, revoke the license to disable the one or more functions of the industrial device based on the revocation, and generate a record that indicates the license was revoked and sign the record using the first private key associated with the industrial device. validate the device information package using a second public key paired with the second private key associated with the certificate authority, decrypt the device information package with the first private key associated with the industrial device, enable the one or more functions of the industrial device based on the license included in the device information package, revoke the license to disable the one or more functions of the industrial device based on the revocation, and generate a record that indicates the license was revoked and sign the record using the first private key associated with the industrial device.