The IoT is composed of a global network of heterogeneous devices that exchange information with each other. In this kind of scenarios, the number of smart objects is increasingly high, which enhances the possibility of attacks that compromise security, privacy and trust of the exchanged information. Thus, the need to provide duly tested, benchmarked and certified security and trust solutions for large-scale IoT arises in order to solve these risks. In this direction, this paper presents ARMOUR, a research project in which a methodology to experiment, validate and certify different technological solutions in large-scale conditions is defined. Additionally, a set of bootstrapping, group sharing and software programming experiments is proposed, on which different tests will be executed with the purpose to verify their security and trust in IoT scenarios.