Introduced here are technologies for securely booting a network access device or a satellite device. A network-accessible server system may receive a boot request that includes a boot certificate to identify the network access device. The network-accessible server system may determine that the boot certificate corresponds with a verified boot certificate listed on a boot certificate registry. The network-accessible server system may determine that a geographical location of the network access device and a user electronic application executing on an electronic device are within a predetermined range. The network-accessible server system may distribute a digital certificate to the network access device based on determining that the boot certificate corresponds with any verified boot certificate listed on the boot certificate registry and determining that the geographical location of the network access device and the user electronic application executing on the electronic device are within the predetermined range.