System and method for secure provisioning of an information handling system

摘要

Systems and methods for reducing problems and disadvantages associated with provisioning of information handling systems, including without limitation those associated with bare metal provisioning of information handling systems, are disclosed. A system may include a processor, and a memory and an access controller each communicatively coupled to the processor. The access controller may store an enterprise public key associated with an enterprise private key and a platform private key associated with the system. The access controller may be configured to: (i) authenticate communications received from a provisioning server communicatively coupled to the access controller based at least on an enterprise public certificate associated with the provisioning server and (ii) establish an asymmetrically cryptographic communications channel between the access controller and the provisioning server based at least on a platform public key associated with the platform private key, the platform private key, the enterprise public key, and the enterprise private key.

主权项

1. An information handling system comprising:
a processor; a memory communicatively coupled to the processor; and an access controller communicatively coupled to the processor, the access controller having stored thereon an enterprise public key associated with an enterprise private key and a platform private key associated with the information handling system, the enterprise public key stored on the access controller prior to shipment of the information handling system to an enterprise associated with the enterprise public key, the access controller configured to:
establish an asymmetrically cryptographic communications channel between the access controller and a provisioning server based on keys, comprising a platform public key associated with the platform private key, the platform private key, the enterprise public key, and the enterprise private key, the platform public key encrypted using the enterprise public key and provided to the enterprise by a supplier; andenable the information handling system to receive provisioning information from the provisioning server via the established communications channel, the provisioning information used to configure the information handling system.