Systems and methods are disclosed for the secure distribution of firmware and configuration updates to un-networked physical devices. A client component is provided for installation on a client device, which is configured to receive, via the client component, a status data packet including a status indication from a beacon, when the client is proximate to the beacon. A server receives the status data packet via the client component, determines whether an update is available for the beacon based at least in part on the status indication, and transmits, to the client device, an encrypted update data message relating to the update for installation at the beacon to complete the update of the beacon.