News

Microsoft Introduces Azure Sphere 'Guardian Modules' for Older IoT Devices

Microsoft described a new mechanism this week called "Guardian Modules" that enables the use of microcontroller units to secure connections for older Internet of Things (IoT) devices.

Guardian Modules are part of Microsoft's Azure Sphere technology, which is currently in preview. Azure Sphere consists of a chip with processing, memory and security capabilities, plus a Linux-based operating system that Microsoft introduced last year to support IoT devices.

In a typical scenario, an Azure Sphere microcontroller unit connects with the Azure Sphere Security Service. The service adds benefits such as device health-check capabilities and the delivery of automated updates.

It might be thought Azure Sphere microcontroller units would just be used in new or "greenfield" rollouts of IoT devices. However, Microsoft is contending that Azure Sphere can support older "brownfield" IoT deployments, too. It can be done when Azure Sphere microcontroller units serve as Guardian Modules for existing IoT devices. The Guardian Modules can permit older IoT equipment that was disconnected or "air-gapped," possibly for security reasons, to become connected units, adding new value, according to Microsoft's view.

When used as Guardian Modules, Azure Sphere microcontroller units will connect with the Azure Sphere Security Service on behalf of the brownfield IoT device. This arrangement "can protect the equipment from attack, ensure data is only transmitted between trusted cloud and device communications partners, and ensure the software of the module and the equipment remains intact and secured," Microsoft's announcement contended. The brownfield IoT device also can benefit by getting software updates from the Azure Sphere Security Service.

Microsoft's announcement didn't describe when Guardian Modules might be seen, nor when Azure Sphere will be ready for production environments. Guardian Modules, though, seem like a possible solution for a disconnected IoT world of devices.

In other IoT security news, Microsoft this week described co-authoring an "IoT Security Model Practitioner's Guide" (PDF) in conjunction with the Industrial Internet Consortium. The 129-page guide aims "to allow organizations to meet their scenario needs without over-investing in security mechanisms," Microsoft's announcement explained.

The guide isn't prescriptive on the specific security measures to adopt. Instead, organizations go through a process of first identifying an industry profile target they want to reach. Next, they assess their current security maturity state. By comparing between the target state with the current security state, areas where IoT security could be improved get highlighted.

The guide also includes three case studies as examples for improving IoT security. More information about the Security Maturity Model is described in an Industrial Internet Consortium Web presentation, which can be accessed here (requires sign-up).

About the Author

Kurt Mackie is senior news producer for 1105 Media's Converge360 group.

Featured

  • Microsoft Offers Support Extensions for Exchange 2016 and 2019

    Microsoft has introduced a paid Extended Security Update (ESU) program for on-premises Exchange Server 2016 and 2019, offering a crucial safety cushion as both versions near their Oct. 14, 2025 end-of-support date.

  • An image of planes flying around a globe

    2025 Microsoft Conference Calendar: For Partners, IT Pros and Developers

    Here's your guide to all the IT training sessions, partner meet-ups and annual Microsoft conferences you won't want to miss.

  • Notebook

    Microsoft Centers AI, Security and Partner Dogfooding at MCAPS

    Microsoft's second annual MCAPS for Partners event took place Tuesday, delivering a volley of updates and directives for its partners for fiscal 2026.

  • Microsoft Layoffs: AI Is the Obvious Elephant in the Room

    As Microsoft doubles down on an $80 billion bet on AI this fiscal year, its workforce reductions are drawing scrutiny over whether AI's ascent is quietly reshaping its human capital strategy, even as official messaging avoids drawing a direct line.