The software update layer supports encryption of uploaded software artifacts.
This encryption strategy simplifies the handling of encryption by:
Making sure that no un-encrypted artifact is ever exposed via the Content Delivery Network.
Providing the decryption key via a second channel (as part of the install command).
For more details please see the Bosch IoT Rollouts documentation.