Hi. We are deploying numerous Mikrotik devices as our CPEs. We own the devices, and would like to retain control over them, including installing containers, using traffic-gen etc.
Obviously, asking our customers to press buttons or power cycle our devices is unacceptable. Perhaps some ISP-friendly way of changing “device mode” could be implemented? My first idea would be:
Create a one-time password, retrievable once per device’s lifetime, that can be used to confirm change of device mode. We could then retrieve it automatically and store it in our database. After first read, this password wouldn’t be retrievable again without physical access to the device (or ever, if so configured)
Another idea: perhaps this could be extended to some anti-theft feature, i.e. a feature that could be enabled only using the password (confirming it was correctly retrieved and stored), which would automatically shutdown a router after 60 minutes, if it was factory reset, and ownership of the device is not confirmed using the password.