Systems and methods for authenticating configurations of an information handling system
As part of a factory provisioning of an Information Handling System (IHS), a configuration certificate is stored that identifies a pre-boot configuration of the IHS resulting from the factory provisioning. Upon a transfer of control or ownership of the IHS, a pre-boot configuration of the IHS is identified and the configuration certificate is utilized to validate that the identified pre-boot configuration is the same as the pre-boot configuration of the IHS resulting from the factory provisioning. A security processor of the IHS may support boot code operations for generating additional configuration certificates that can be used to validate the integrity of any changes the IHS configuration, such as upon its next power cycle.
1. A security processor installed in an IHS (Information Handling System), the security processor comprising:
a logic unit; and
a memory coupled to the logic unit, the memory having program instructions stored thereon that, upon execution by the logic unit, cause the security processor to:
as part of a factory provisioning of the IHS:
store a first signed configuration certificate that identifies a first pre-boot configuration for one or more individual hardware components of the IHS resulting from the factory provisioning of the IHS; and
upon a transfer of control or ownership of the security processor:
identify a second pre-boot configuration for the one or more individual hardware components of the IHS; and
utilize the first signed configuration certificate to validate that the identified second pre-boot configuration of the IHS is the same as the first pre-boot configuration of the IHS resulting from the factory provisioning.
2. The security processor of claim 1 , wherein, upon the transfer of control or ownership of the security processor, the execution of the instructions by the logic unit further causes the security processor to: detect a change to the second pre-boot configuration of the IHS; and initiate boot code operations for generating a second configuration certificate that identifies the changed second pre-boot configuration of the IHS.
3. The security processor of claim 2 , wherein the second configuration certificate is signed by an embedded certificate authority of the security processor.
4. The security processor of claim 2 , wherein, upon the transfer of control or ownership of the security processor, the execution of the instructions by the logic unit further causes the security processor to: store the second configuration certificate for use in validating the authenticity of the changed second pre-boot configuration of the IHS upon its next power cycle.
5. The security processor of claim 1 , wherein the first and second pre-boot configurations for the one or more individual hardware components of the IHS are pairings of pre-boot platform settings and associated values.
6. The security processor of claim 1 , wherein, during a trusted administration of the IHS by an owner of the IHS, the execution of the instructions by the logic unit further causes the security processor to: store a signed third configuration certificate that identifies updated pre-boot configurations made to the IHS during the trusted administration.
7. The security processor of claim 2 , wherein the second configuration certificate is generated based on instructions validated based on security credentials imported to the IHS by a renter.
8. The security processor of claim 7 , wherein the security credentials are imported by the renter based on validation of the IHS being factory provisioned to support secure transfer of security credentials by the renter.
9. The security processor of claim 1 , wherein the owner of the IHS comprises a manufacturer of the IHS.
10. A memory storage device having program instructions stored thereon that, upon execution by an Information Handling System (IHS), cause the IHS to:
as part of a factory provisioning of the IHS:
store a first signed configuration certificate that identifies a first pre-boot configuration for one or more individual hardware components of the IHS resulting from the factory provisioning of the IHS; and
upon a transfer of control or ownership of the IHS:
identify a second pre-boot configuration for the one or more individual hardware components of the IHS; and
utilize the first signed configuration certificate to validate that the identified second pre-boot configuration of the IHS is the same as the first pre-boot configuration of the IHS resulting from the factory provisioning.
11. The memory storage device of claim 10 , wherein, upon the transfer of control or ownership of the IHS, the execution of the instructions by the logic unit further causes the IHS to: detect a change to the second pre-boot configuration of the IHS; and initiate boot code operations for generating a second configuration certificate that identifies the changed second pre-boot configuration of the IHS.
12. The memory storage device of claim 11 , wherein the second configuration certificate is signed by an embedded certificate authority of a security processor of the IHS.
13. The memory storage device of claim 11 , wherein, upon the transfer of control or ownership of the IHS, the execution of the instructions by the logic unit further causes the IHS to: store the second configuration certificate for use in validating the authenticity of the changed second pre-boot configuration of the IHS upon its next power cycle.
14. The memory storage device of claim 10 , wherein the first and second pre-boot configurations for the one or more individual hardware components of the IHS are pairings of pre-boot platform settings and associated values.
15. The memory storage device of claim 10 , wherein, during a trusted administration of the IHS by an owner of the IHS, the execution of the instructions by the logic unit further causes the IHS to: store a signed third configuration certificate that identifies updated pre-boot configurations made to the IHS during the trusted administration.
16. A method for securing an Information Handling System (IHS), the method comprising:
as part of a factory provisioning of the IHS:
storing a first signed configuration certificate that identifies a first pre-boot configuration for the one or more individual hardware components of the IHS resulting from the factory provisioning of the IHS; and
upon a transfer of control or ownership of the IHS:
identifying a second pre-boot configuration for the one or more individual hardware components of the IHS; and
utilizing the first signed configuration certificate to validate that the identified second pre-boot configuration of the IHS is the same as the first pre-boot configuration of the IHS resulting from the factory provisioning.
17. The method of claim 16 , further comprising, upon the transfer of control or ownership of the IHS, detecting a change to the second pre-boot configuration of the IHS; and initiating boot code operations for generating a second configuration certificate that identifies the changed second pre-boot configuration of the IHS.
18. The method of claim 17 , wherein the second configuration certificate is signed by an embedded certificate authority of a security processor of the IHS.
19. The method of claim 17 , further comprising, upon the transfer of control or ownership of the IHS, storing the second configuration certificate for use in validating the authenticity of the changed second pre-boot configuration of the IHS upon its next power cycle.
20. The method of claim 17 , further comprising, during a trusted administration of the IHS by an owner of the IHS, store a signed third configuration certificate that identifies updated pre-boot configurations made to the IHS during the trusted administration.