A challenge value is received at a network connected device from a first server. A secure communication channel is established with the first server based on the challenge value. A request is sent from the network connected device to a second server to authenticate with the second server, wherein sending the request comprises sending a challenge response based on the challenge value to the second server prior to receiving a challenge from the second server. A challenge decision is received from the second server at the network connected device. The network connected device authenticates with the second server in response to the challenge decision.