Section: I.9 Security of UE onboarding in SNPNs I.9.1 General
Content: Onboarding of UEs for SNPNs is specified in clause 5.30.2.10 of TS 23.501[ System architecture for the 5G System (5GS) ]  [2]. Onboarding of UEs for SNPNs allows the UE to access an Onboarding Network (ONN) based on Default UE credentials for the purpose of provisioning the UE with SNPN credentials and any other necessary information. The Default UE credentials are pre-configured on the UE. Default UE credentials consist of credentials for primary authentication and optionally credentials for secondary authentication. To provision SNPN credentials in a UE that is configured with Default UE credentials, the UE selects an SNPN as ONN and establishes a secure connection with that SNPN referred to as Onboarding SNPN (ON-SNPN). The present clause specifies security of UE onboarding.