EIoT uses HTTPS, administrator authentication and signed licences and updates.
Keep secrets private. Keep passwords, authenticator setup keys, recovery codes and backups private. Use the private owner console to manage customers.
Your data stays on your server. Download current data from Diagnostics and keep a backup outside that server.
Signatures detect tampering. Domain restrictions and signatures protect normal operation and detect edited files. They cannot prevent a server owner from modifying the software itself.
Report issues privately. For an access or security issue, contact your EIoT administrator privately. Do not post credentials or recovery material.