SEALSQ Zero Touch Provisioning in the Field is a certificate-based provisioning solution that enables automatic configuration and deployment of IoT devices without manual intervention. The system provisions digital certificates and private keys over-the-air directly to devices in the field, eliminating the need for pre-configuration during manufacturing. The solution addresses supply chain challenges by allowing device manufacturing without prior knowledge of final deployment destinations. It supports certificate-based device identities including iDevID and lDevID from IEEE standard 802.1AR, EST from RFC7030, and X.509 certificates. The cloud-based architecture enables scalable deployments for millions of devices. Devices receive minimal identity at manufacturing time and obtain complete identity upon first installation by end users. The INeS ZTP service acts as a trusted authority for factory resets, device ownership transfers, and decommissioning. The platform supports multiple use cases including new device provisioning at customer sites, provisioning within service provider infrastructure, software upgrades and patches, IoT deployments at scale, and bulk device provisioning. It enables automatic device onboarding and authentication to IoT cloud platforms using X.509 authentication technology. The system provides remote attestation capabilities and integrates with third-party Certificate Authorities. It supports standardized certificate-based device identity solutions for secure zero-trust environments and device-to-cloud authentication.