| Number | Source | Destination | Description |
|---|---|---|---|
| 1 | Device | MQTT broker | Connect with bootstrap credential |
| 2 | MQTT broker | Device registry | Validate provisioning claim |
| 3 | Device registry | CA service | Request signed certificate (CSR) |
| 4 | CA service | Device registry | Operational certificate |
| 5 | Device registry | Twin store | Initialise desired/reported state |
| 6 | Device registry | Device | Certificate + initial config |
| 7 | Device | MQTT broker | Reconnect with operational certificate |
| 8 | MQTT broker | Device registry | Session established (active) |