Microsoft Introduces Azure Sphere 'Guardian Modules' for Older IoT Devices

Microsoft described a new mechanism this week called "Guardian Modules" that enables the use of microcontroller units to secure connections for older Internet of Things (IoT) devices.

Guardian Modules are part of Microsoft's Azure Sphere technology, which is currently in preview. Azure Sphere consists of a chip with processing, memory and security capabilities, plus a Linux-based operating system that Microsoft introduced last year to support IoT devices.

In a typical scenario, an Azure Sphere microcontroller unit connects with the Azure Sphere Security Service. The service adds benefits such as device health-check capabilities and the delivery of automated updates.

It might be thought Azure Sphere microcontroller units would just be used in new or "greenfield" rollouts of IoT devices. However, Microsoft is contending that Azure Sphere can support older "brownfield" IoT deployments, too. It can be done when Azure Sphere microcontroller units serve as Guardian Modules for existing IoT devices. The Guardian Modules can permit older IoT equipment that was disconnected or "air-gapped," possibly for security reasons, to become connected units, adding new value, according to Microsoft's view.

When used as Guardian Modules, Azure Sphere microcontroller units will connect with the Azure Sphere Security Service on behalf of the brownfield IoT device. This arrangement "can protect the equipment from attack, ensure data is only transmitted between trusted cloud and device communications partners, and ensure the software of the module and the equipment remains intact and secured," Microsoft's announcement contended. The brownfield IoT device also can benefit by getting software updates from the Azure Sphere Security Service.

Microsoft's announcement didn't describe when Guardian Modules might be seen, nor when Azure Sphere will be ready for production environments. Guardian Modules, though, seem like a possible solution for a disconnected IoT world of devices.

In other IoT security news, Microsoft this week described co-authoring an "IoT Security Model Practitioner's Guide" (PDF) in conjunction with the Industrial Internet Consortium. The 129-page guide aims "to allow organizations to meet their scenario needs without over-investing in security mechanisms," Microsoft's announcement explained.

The guide isn't prescriptive on the specific security measures to adopt. Instead, organizations go through a process of first identifying an industry profile target they want to reach. Next, they assess their current security maturity state. By comparing between the target state with the current security state, areas where IoT security could be improved get highlighted.

The guide also includes three case studies as examples for improving IoT security. More information about the Security Maturity Model is described in an Industrial Internet Consortium Web presentation, which can be accessed here (requires sign-up).

About the Author

Kurt Mackie is senior news producer for 1105 Media's Converge360 group.


  • Microsoft Announces Milestones for 'Perpetual' Office Products

    Office 2021 for Windows, commonly thought of as the retail "boxed" product, will reach general availability on Oct. 5, the same day as Windows 11.

  • The Case for Windows 11 Will Be Made with Security and Telemetry

    Steering a Windows 11 move will be rough without measuring the gains or losses along the way, so says Cambridge, Mass.-based Microsoft partner Aternity.

  • The 2021 Microsoft Product Roadmap

    From Windows 10X to the next generation of Microsoft's application server products, here are the product milestones coming down the pipeline in 2021.

  • New Microsoft 365 Monitoring Platform Helps MSPs Avoid the 'Logo Blame Game'

    Martello Technologies has announced a new platform to help partners manage their customers' Microsoft 365 and Microsoft Teams deployments.