A method includes receiving, by an industrial automation device, a first changeset with a first digital signature generated using a private key, wherein the first changeset includes a data package for modifying a configuration or a state of the industrial automation device; verifying, by the industrial automation device, the first digital signature of the first changeset based on a pre-stored public key corresponding to the private key; obtaining, by the industrial automation device, an approval for applying the first changeset in response to verifying the first digital signature of the first changeset, wherein the approval is obtained by finding a pre-stored approval token corresponding to the first changeset, or by receiving a user input indicating the approval; and applying, by the industrial automation device, the first changeset in response to obtaining the approval.