ThingMake — models, registrars, and provisioning

ThingMake owns the manufacturing side of a thing’s lifecycle: public device models, registrars, factory integrations, provisioning runs, and lifecycle actions. Open ThingMake from the account console product switcher.

Public device models

A model is the public descriptor for a manufactured device family. It includes a product identifier, device class, hardware revision, display information, provisioning method, and provisioning configuration.

Create the model before connecting a factory service. Model detail shows the descriptor, provenance, and things that use it.

Registrars

A registrar represents the manufacturing authority responsible for enrolled things. Create a registrar with a stable name and display information, then open its detail to review registration authority, configuration, and provisioning runs.

Registrar governance that crosses tenant boundaries belongs to platform administrators in Arsenal.

Factory integrations and one-time credentials

A factory service is a non-human integration for production-line automation. It is bound to a registrar, model, role, and HTTPS endpoint.

  1. Open Factory integrations and register a factory service.

  2. Copy or download the access-key/secret-key credentials from the one-time reveal dialog immediately.

  3. Store the secret in an approved secret manager. It cannot be retrieved later.

  4. Run the health check before depending on the integration.

Factory services are not human console profiles. They authenticate signed API requests and must never be given console access.

The same work area shows pending access requests. Approve or reject only after reviewing the requested registrar, model, role, and endpoint.

Thing lifecycle

The thing list and detail page show manufacturing identity, current lifecycle state, trust status, and audit history. Supported operations depend on the current state and your grants:

State

Meaning

ROLLEDOFF

Recorded at the factory but not provisioned for platform use.

PROVISIONED

Platform identity and provisioning material have been issued.

ACTIVATED

Cleared for normal operation.

DEACTIVATED

Temporarily suspended and eligible for later activation.

ANNIHILATED

Permanently retired and blacklisted.

Provision, activate, deactivate, or re-activate only from a valid source state. Annihilation is a terminal operation and requires typed confirmation. Use deactivation when a temporary suspension is sufficient.

Provisioning runs

Provisioning runs group lifecycle work and expose progress, scope, and failure details. Open a run from a registrar or thing workflow to diagnose partial or failed execution before retrying.

External integrations

Factory software uses the public ThingMake integration API and FGAI-HMAC signing documented on the developer site. Browser routes under /thingmake/api/ are private console contracts and are not an external API.