Diploma in Secure Boot, Hardening and A/B Updates
Online postgraduate diploma of 800 hours in Secure Boot, Hardening and A/B Updates: 8 modules covering device threat modelling, verified boot, OS hardening, data protection, A/B update schemes, update deployment and security testing, with an assigned technical tutor.
Diploma in Secure Boot, Hardening and A/B Updates — studying from South Africa
Electronics and telecommunications are substantial sectors in South Africa, with operators such as MTN, Vodacom and Telkom supporting national connectivity. Electronics manufacturers and design houses serve automotive, industrial and consumer markets, and embedded systems engineers are needed across these industries. Research at institutions such as Stellenbosch University and the CSIR contributes to advances in communications and signal processing. Compliance with national radio spectrum rules is overseen by the national communications regulator.
Fees for South Africa: R 16 700 (South African rand), with instalments and employer sponsorship available.
Relevant bodies in South Africa
Typical roles
Questions from South Africa
Which South African bodies recognise electronics and telecom engineers, and does SEIUM feature?
ECSA registers engineering professionals in South Africa, and the Electronic Communications and Postal Act means telecom roles are regulated through ICASA and related licensing. SEIUM is a private online institute whose qualifications are not official state degrees and are not accredited by a national body. Recognition is decided by employers or the relevant professional body, so check with them before enrolling.
Would this programme help me work in embedded systems or telecoms in South Africa?
South Africa has electronics manufacturers, telecom operators and technology firms that employ embedded and communications engineers. Employers typically weigh practical skills, experience and recognised qualifications. A private online qualification can strengthen your profile in specialist areas, but it does not guarantee employment. Ask prospective employers whether they would value it.
Can I study around a job, and what English level is needed?
The programme is entirely online and taught in English, so you need solid English for coursework and tutor communication. Because it is remote, no student visa is needed to study from home. Master's programmes are 1,900 hours, postgraduate diplomas 800 hours and specialist courses 300 hours, each supported by a technical tutor. Fees can be paid in instalments, and employer sponsorship may be possible.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Build threat models for embedded devices.
Implement verified boot from the root of trust.
Harden the operating system with access controls and isolation.
Protect stored data through encryption and integrity mechanisms.
Design A/B update schemes with automatic rollback.
Deploy updates securely across device fleets.
Verify device security against the applicable standards.
Who it's for
- Embedded security engineers responsible for protecting devices from boot to field updates.
- Embedded Linux engineers building secure, maintainable system images.
- OTA update architects designing robust update and rollback strategies.
- Product cybersecurity analysts preparing products for the Cyber Resilience Act and IEC 62443.
- Security validation engineers who test and audit embedded firmware.
- Product security managers overseeing compliance and vulnerability handling.
- Engineering or science graduates looking to move into the automotive sector.
What you'll work with
- IEC 62443-4-2:2019 (technical security requirements for industrial automation components)
- NIST SP 800-193 (Platform Firmware Resiliency Guidelines)
- Regulation (EU) 2024/2847 (Cyber Resilience Act)
- ETSI EN 303 645 (cyber security for consumer IoT)
- UN Regulation No. 156 – UNECE R156 (software updates and update management systems for vehicles)
- ISO/SAE 21434:2021 (road vehicle cybersecurity engineering)
- UEFI Specification 2.10 (firmware interface and Secure Boot)
- U-Boot (verified boot)
- RAUC
- SWUpdate
- Mender
- Lynis
8 modules
1.1Attack surface of an embedded system1.2STRIDE analysis and attack trees1.3Assets, adversaries and security requirements1.4Security levels according to IEC 624431.5Essential requirements of the Cyber Resilience Act1.6Physical attacks: JTAG, UART and flash extraction1.7Remote attacks and persistence mechanisms1.8Defence in depth across the lifecycle1.9Documentation of traceable requirements1.10Case study: threats to an IoT gateway
2.1Root of trust and boot ROM2.2Verification of signed FIT images in U-Boot2.3UEFI Secure Boot, shim and db/dbx keys2.4High Assurance Boot on NXP i.MX2.5Signing the kernel, initramfs and device tree2.6Custody of signing keys in an HSM2.7dm-verity for rootfs integrity2.8Key revocation and rotation2.9OTP fuses and device lockdown2.10Lab: signed FIT chain in U-Boot
3.1Secure kernel configuration according to KSPP3.2Reducing services and exposed surface3.3Mandatory access control: SELinux and AppArmor3.4Seccomp, capabilities and namespaces3.5Read-only and noexec mounts3.6Accounts, passwords and SSH access3.7Firewalling with nftables3.8Disabling debug interfaces3.9Auditing with Lynis and CIS Benchmarks3.10Practical: hardening a Yocto image
4.1Partition encryption with dm-crypt and LUKS4.2Hardware-bound keys4.3Block integrity with dm-integrity4.4Storage of secrets and certificates4.5Secure erasure and end of life4.6Power-loss-resilient file systems4.7Separation of user and system data4.8Protection against offline attacks4.9Log management and privacy4.10Workshop: encrypted partition with automatic unlocking
5.1A/B partitioning versus recovery mode5.2Boot counters and bootcount in U-Boot5.3Automatic rollback on failure5.4Delta and block-based updates5.5Atomicity in the event of power interruptions5.6Updating the bootloader and firmware5.7Flash size and layout strategies5.8Post-update health checks5.9Backward compatibility of data5.10Lab: A/B slots with RAUC and bootcount
6.1Comparison of RAUC, SWUpdate and Mender6.2Signed bundles and their verification6.3Deployment servers: hawkBit and Mender Server6.4Campaigns, groups and staged rollout6.5Secure transport and mutual authentication6.6Integration with Yocto and CI6.7Fleet monitoring and telemetry6.8UNECE R156 requirements for vehicles6.9Handling mass failures in the field6.10Practical: staged rollout with hawkBit
7.1Penetration testing of embedded systems7.2Fuzzing of interfaces and protocols7.3Firmware analysis with binwalk7.4Fault injection testing7.5ETSI EN 303 645 compliance assessment7.6Vulnerability management and coordinated disclosure7.7Update regression testing7.8Evidence for certification7.9Continuous improvement of the security posture7.10Case study: audit of an industrial router
8.1Product threat model8.2Design of the verified boot chain8.3Hardening of the system image8.4A/B update scheme8.5Rollback and power-cut testing8.6Security assessment and findings8.7Field maintenance plan8.8Regulatory compliance report8.9Report and presentation8.10Final project: final review with your tutor
How you'll learn
The programme is delivered 100% online on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within the intake, so you can combine it with your job.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is U-Boot (verified boot), RAUC, SWUpdate, Mender and Lynis, in free, academic or evaluation versions. Testing is studied through real procedures: rollback tests with power cuts, image hardening audits and firmware penetration tests. Assessment is continuous, module by module, plus the final project.
Standards covered: IEC 62443-4-2:2019, NIST SP 800-193 (Platform Firmware Resiliency Guidelines), Regulation (EU) 2024/2847 (Cyber Resilience Act), ETSI EN 303 645, UN Regulation No. 156 (UNECE R156), ISO/SAE 21434:2021 and UEFI Specification 2.10.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Where this takes you
Requirements
- Prior technical training or professional experience in the sector. No university degree is required.
- An internet connection and a computer capable of running the programme software.
- English sufficient to read technical standards.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 800 hours over 6–8 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.
You work with U-Boot (verified boot), RAUC, SWUpdate, Mender and Lynis, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.
A SEIUM Institute diploma, awarded on passing the continuous assessment and the final project. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.
Yes. Modules passed are recognised in a higher programme in the same area (postgraduate diploma or master's). Ask about the recognition policy when you enrol.
Prior technical training or professional experience in the sector (no university degree required), a computer able to run the programme software and English sufficient to read technical standards.
Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.
Related programmes
Diploma in SMPS/LDO: Control, Noise and Transients
Online postgraduate diploma of 800 hours in SMPS/LDO design: control, noise and transients. 8 modules covering switched-mode topologies, LDO regulators, converter modelling and control, transient response,…
Postgraduate Diploma in Bridge and Navigation Systems
Online 800-hour Postgraduate Diploma in Bridge and Navigation Systems. 8 modules covering SOLAS Chapter V, IEC 61924-2:2012 (INS) and Transas Navi-Trainer. Personal tutor assigned and enrolment…
Postgraduate Diploma in Key Management and Cryptography in Devices
Online 800-hour Postgraduate Diploma in Key Management and Cryptography in Devices. 8 modules covering NIST SP 800-57 Part 1, FIPS 140-3 and OpenSSL. Assigned tutor and…
More in Electronics, Embedded Systems & Telecom
All Electronics, Embedded Systems & Telecom programmes → · How to apply · Fees & financing · Scholarships