Secure identification of components installed in information handling systems
Methods and system are provided for validating the secure assembly and delivery of an IHS (Information Handling System). During factory provisioning of the IHS, an inventory certificate is uploaded to the IHS, where the certificate includes an inventory of the hardware components installed during factory assembly of the IHS and also includes validation schemas the provide instructions for identifying hardware components of the IHS. Upon delivery of the assembled IHS, a validation process is initialized and the inventory certificate is retrieved. Based on the instructions set forth by the validation schemas, the validation process collects an inventory of the detected hardware components of the IHS. The instructions of the validation schemas are further used to compare the collected inventory against the inventory from the signed inventory certificate in order to validate the detected hardware components of the IHS as the same hardware components installed during factory assembly of the IHS.
1. A method for validating secure assembly of an IHS (Information Handling System), the method comprising:
retrieving an inventory certificate uploaded to the IHS during factory provisioning of the IHS, wherein the inventory certificate includes an inventory identifying a plurality of factory installed hardware components of the IHS, and wherein the inventory certificate further includes a plurality of validation schemas that comprise instructions for identifying the factory installed hardware components;
collecting an inventory of detected hardware components of the IHS, wherein the inventory is collected based on identifications made using the instructions specified by the validation schemas included in the inventory certificate; and
comparing the collected inventory against the inventory from the inventory certificate in order to validate the detected hardware components of the IHS as the same hardware components installed during factory assembly of the IHS.
2. The method of claim 1 , wherein the comparisons are conducted based on the instructions specified by the validation schemas included in the inventory certificate.
3. The method of claim 1 , wherein the instructions of the validation schemas specify unique identifiers for use in the identifications of the factory installed hardware components.
4. The method of claim 1 , wherein the instructions of the validation schemas specify requirements for use in the identifications of the factory installed hardware components.
5. The method of claim 1 , wherein the inventory certificate is uploaded to a persistent memory of the IHS during the factory provisioning of the IHS.
6. The method of claim 1 , wherein the validation schemas are generated for each of the factory installed hardware components during the factory provisioning of the IHS.
7. The method of claim 1 , wherein the validation process confirms an integrity of the validation schemas prior to using the schemas in collecting an inventory of detected hardware components.
8. The method of claim 7 , wherein the integrity of the validation schemas is confirmed based on digital signatures generated by the IHS during the factory provisioning of the IHS.
9. The method of claim 4 , wherein the instructions of the validation schemas specify unique identifiers for a combination of two or more hardware components that are collectively required for validation of the secure assembly of the IHS.
10. An IHS (Information Handling System) comprising:
a plurality of hardware components, wherein during factory provisioning of the IHS an inventory certificate is uploaded to the IHS that includes an inventory of the factory installed hardware components of the IHS and further includes a plurality of validation schemas that comprise instructions for identifying the factory installed hardware components of the IHS, and wherein the hardware components comprise:
one or more processors; and
one or more memory devices coupled to the processors, the memory devices storing computer-readable instructions that, upon execution by the processors, cause a validation process of the IHS to:
collect an inventory of the plurality of hardware components using the instructions specified by the validation schemas included in the inventory certificate; and
compare the collected inventory against the inventory from the inventory certificate in order to validate the plurality of hardware components of the IHS as the same hardware components installed during factory assembly of the IHS.
11. The IHS of claim 10 , wherein the comparisons are conducted based on the instructions specified by the validation schemas included in the inventory certificate.
12. The IHS of claim 10 , wherein the instructions of the validation schemas specify unique identifiers for use in the identifications of the factory installed hardware components.
13. The IHS of claim 10 , wherein the instructions of the validation schemas specify requirements for use in the identifications of the factory installed hardware components.
14. The IHS of claim 10 , wherein the inventory certificate is uploaded to a persistent memory of the IHS during the factory provisioning of the IHS.
15. The IHS of claim 10 , wherein the validation schemas are generated for each of the factory installed hardware components during the factory provisioning of the IHS.
16. A computer-readable storage device having instructions stored thereon for validating secure assembly of an IHS (Information Handling System), wherein execution of the instructions by one or more processors of the IHS causes a validation process of the IHS to:
retrieve an inventory certificate uploaded to the IHS during factory provisioning of the IHS, and wherein the inventory certificate includes an inventory of factory installed hardware components of the IHS and further includes validation schemas that comprise instructions for identifying the factory installed hardware components;
collect an inventory of detected hardware components of the IHS based on the instructions specified by the validation schemas; and
compare the inventory of detected hardware components against the inventory from the inventory certificate in order to validate the plurality of detected hardware components of the IHS as the same hardware components installed during factory assembly of the IHS.
17. The storage device of claim 16 , wherein the comparisons are conducted based on the instructions specified by the validation schemas included in the inventory certificate.
18. The storage device of claim 16 , wherein the instructions of the validation schemas specify unique identifiers for use in the identifications of the factory installed hardware components.
19. The storage device of claim 16 , wherein the instructions of the validation schemas specify requirements for use in the identifications of the factory installed hardware components.
20. The storage device of claim 16 , wherein the validation process comprises a pre-boot process of the IHS.