Systems, methods, and devices for provisioning user equipment devices. A zero touch configuration proxy (ZTCP) component may be configured to receive a client certificate and a request for a configuration file from a UE device, verify the authenticity of the received client certificate, use PKI and the SSL_CLIENT_S_DN_CN field of the client certificate to identify the UE, issue various commands/API calls to a provisioning system, determine whether the specific UE device is currently authorized to receive a particular service (e.g., VoIP, etc.), determine whether the specific UE device is allowed to access the requested configuration file, and send the configuration file to the UE device in response to determining, based on SSL_CLIENT_S_DN_CN field in the client certificate, that the UE device is authorized to access the configuration file and receive the requested service.