A bridge application receives a request from a remote device to access a support server. Subsequently, the bridge application established a secure connection between the bridge application and the support server and establishes a secure connection between the bridge application and the remote device. Once these secure connections are both established, communications are relayed between the remote device and the support server to effect a software change to network device. The secure connections are later terminated upon completion of the software change to the remote device. Related apparatus, systems, techniques and articles are also described.