Secure booting of information handling systems based on validated hardware
Embodiments support secure booting of an IHS (Information Handling System) based on validation of the secure assembly and delivery of the IHS. A validation process of the IHS is initialized that delays further booting of the IHS until detected hardware components of the IHS are validated. An inventory certificate is retrieved that was uploaded to the IHS during factory provisioning of the IHS. The inventory certificate includes an inventory that identifies hardware components installed during factory assembly of the IHS. A collected inventory of detected hardware components of the IHS is compared against the inventory from the inventory certificate in order to validate the detected hardware components of the IHS as the same hardware components installed during factory assembly of the IHS. When the comparison validates the detected hardware components of the IHS as only including factory assembled hardware, further booting of the IHS is allowed.
1. A method for validating secure assembly and delivery of an IHS (Information Handling System), the method comprising:
during factory-provisioning of the IHS:
generating, by a remote access controller of the IHS, a first certificate signing request (CSR) that identifies an inventory of factory-installed hardware components of the first IHS;
transmitting, by the remote access controller of the IHS, the first CSR to a factory certificate authority;
uploading an inventory certificate generated by the factory certificate authority from the CSR to the IHS; and
upon delivery of the IHS:
initializing a validation process of the IHS, wherein the validation process delays further booting of the IHS until detected hardware components of the IHS are validated;
retrieving, by the validation process, the inventory certificate uploaded to the IHS during factory provisioning of the IHS, wherein the inventory certificate includes an inventory identifying a plurality of hardware components installed during factory assembly of the IHS;
collecting, by the validation process, an inventory of the detected hardware components of the IHS;
comparing the collected inventory of detected hardware components against the inventory from the inventory certificate in order to validate the detected hardware components of the IHS as the same hardware components installed during factory assembly of the IHS; and
when the comparison validates the detected hardware components of the IHS, allowing further booting of the IHS.
2. The method of claim 1 , further comprising, when the comparison does not validate the detected hardware components of the IHS, notifying a user of the IHS of the discrepancy between the detected hardware components of the IHS and the hardware components installed during factory assembly of the IHS.
3. The method of claim 2 , further comprising, allowing the user to disable a detected hardware component of the IHS that is not validated.
4. The method of claim 2 , further comprising, allowing the user to authorize use of a detected hardware components of the IHS that is not validated.
5. The method of claim 4 , further comprising, updating the inventory certificate to identify the authorized hardware components as a hardware component validated by the user.
6. The method of claim 1 , wherein the inventory included in the inventory certificate further identifies a plurality of hardware components provided for installation in the IHS by a trusted entity.
7. The method of claim 6 , wherein the comparison further validates the detected hardware components of the IHS as the same hardware components installed during factory assembly of the IHS or as hardware components provided for installation in the IHS by a trusted entity.
8. The method of claim 1 , wherein the inventory certificate is uploaded to a persistent memory of the IHS by that is accessible by the remote access controller of the IHS.
9. An IHS (Information Handling System) comprising:
a plurality of hardware components comprising:
one or more processors; and
one or more memory devices coupled to the processors, the memory devices storing computer-readable instructions that, upon execution by the processors, cause a factory provisioning process to:
generate, by a remote access controller of the IHS, a first certificate signing request (CSR) that identifies an inventory of factory-installed hardware components of the first IHS;
transmit, by the remote access controller of the IHS, the first CSR to a factory certificate authority;
upload an inventory certificate generated by the factory certificate authority from the CSR to the IHS; and
and, upon delivery of the IHS, further cause a validation process of the IHS to:
delay booting of an operating system of the IHS until the plurality of hardware components of the IHS are validated;
compare the plurality of hardware components against the inventory from the inventory certificate in order to validate the plurality of hardware components of the IHS as the same hardware components installed during factory assembly of the IHS; and
when the comparison validates the plurality of hardware components of the IHS, allow further booting of the operating system of the IHS.
10. The IHS of claim 9 , wherein the execution of instructions by the processor further causes the validation process to: when the comparison does not validate the detected hardware components of the IHS, notify a user of the IHS of the discrepancy between the plurality of hardware components of the IHS and the hardware components installed during factory assembly of the IHS.
11. The IHS of claim 10 , wherein the execution of instructions by the processor further causes the validation process to allow the user to disable a hardware component of the IHS that is not validated.
12. The IHS of claim 10 , wherein the execution of instructions by the processor further causes the validation process to allow the user to authorize use of a hardware component of the IHS that is not validated.
13. The IHS of claim 12 , wherein the execution of instructions by the processor further causes the validation process to update the inventory certificate to identify the authorized hardware component as a hardware component validated by the user.
14. The IHS of claim 9 , wherein the inventory included in the inventory certificate further identifies a plurality of hardware components provided for installation in the IHS by a trusted entity.
15. The IHS of claim 14 , wherein the comparison further validates the detected hardware components of the IHS as the same hardware components installed during factory assembly of the IHS or as hardware components provided for installation in the IHS by a trusted entity.
16. A non-transitory computer-readable storage device having instructions stored thereon for validating secure assembly and delivery of an IHS (Information Handling System), wherein execution of the instructions by one or more processors of the IHS causes a factory provisioning process of the IHS to:
generate, by a remote access controller of the IHS, a first certificate signing request (CSR) that identifies an inventory of factory-installed hardware components of the first IHS;
transmit, by the remote access controller of the IHS, the first CSR to a factory certificate authority,
upload an inventory certificate generated by the factory certificate authority from the CSR to the IHS; and
and, upon delivery of the IHS, further cause a validation process of the IHS to:
delay booting of an operating system of the IHS until detected hardware components of the IHS are validated;
retrieve an inventory certificate uploaded to the IHS during factory provisioning of the IHS, wherein the inventory certificate includes an inventory identifying a plurality of hardware components installed during factory assembly of the IHS;
collect an inventory of the detected hardware components of the IHS;
compare the collected inventory against the inventory from the inventory certificate in order to validate the detected hardware components of the IHS as the same hardware components installed during factory assembly of the IHS; and
when the comparison validates the detected hardware components of the IHS, allow booting of the operating system of the IHS.
17. The non-transitory storage device of claim 16 , wherein the execution of instructions by the processor further causes the validation process to: when the comparison does not validate the detected hardware components of the IHS, notify a user of the IHS of the discrepancy between the plurality of detected hardware components of the IHS and the hardware components installed during factory assembly of the IHS.
18. The non-transitory storage device of claim 17 , wherein the execution of instructions by the processor further causes the validation process to allow the user to disable a hardware component of the IHS that is not validated.
19. The non-transitory storage device of claim 17 , wherein the execution of instructions by the processor further causes the validation process to allow the user to authorize use of a hardware component of the IHS that is not validated.
20. The non-transitory storage device of claim 19 , wherein the execution of instructions by the processor further causes the validation process to update the inventory certificate to identify the authorized hardware component as a hardware component validated by the user.