MESH NETWORK COMMISSIONING

A joining device is securely joined to a mesh network. At a joiner router, a Datagram Transport Layer Security-, DTLS-, ClientHello message can be received from the joining device requesting to join the mesh network. The received DTLS-ClientHello message can be encapsulated in a DTLS Relay Receive Notification message, and the DTLS Relay Receive Notification message can be transmitted to a commissioning device of the mesh network. A DTLS Relay Transmit Notification message can be received from the commissioning device. Content of the DTLS Relay Transmit Notification message can be transmitted to the joining device, the content effective to enable the joining device to join the mesh network. An indication that the joining device is to be entrusted to receive network credentials for the mesh network can be received from the commissioning device. A Key Encryption Key, KEK, that is shared between the commissioning device and the joining device can be received from the commissioning device. Responsive to the receiving the indication, the network credentials can be transmitted from the joiner router to the joining device using the KEK to secure communication of the network credentials.