Systems and methods for importing security credentials for use by an information handling system

1. A security processor installed in an IHS (Information Handling System), the security processor comprising:

a logic unit; and

a memory coupled to the logic unit, the memory having program instructions stored thereon that, upon execution by the logic unit, cause the security processor to:

as part of a factory provisioning of the IHS for use by a renter, wherein the factory provisioning is conducted as part of a secure manufacture of the IHS:

store a key injection authorization certificate for authorizing key injection by the renter; and

upon a transfer of control or ownership of the security processor:

validate a key injection request certificate provided by the renter; and

authorize use of the key injection request certificate for transferring credentials of the renter to the IHS for use by the security processor, wherein the credentials transferred to the IHS using the key injection request certificate are utilized by the security processor to establish a root of trust that is based on instructions provided by the renter.

2. The security processor of claim 1 , wherein the key injection authorization certificate is signed by an embedded certificate authority of the security processor.

3. The security processor of claim 1 , wherein the key injection authorization certificate specifies an identity of the IHS as being authorized for key injection by the renter.

4. The security processor of claim 3 , wherein the key injection request certificate specifies an identity of the IHS that is requested for key injection by the renter.

5. The security processor of claim 4 , wherein the identity of the IHS specified in the key injection authorization certificate and in the key injection request certificate comprise a service tag.

6. The security processor of claim 4 , wherein transfer of credentials to the IHS is authorized when the identity of the IHS specified in the key injection authorization certificate is the same as the identity of the IHS specified in the key injection request certificate.

7. The security processor of claim 1 , wherein the credentials are transferred to a protected memory of the security processor.

8. The security processor of claim 1 , wherein the key injection request certificate is imported to the security processor by the renter as part of a request by the renter for key injection to the security processor.

9. A memory storage device having program instructions stored thereon that, upon execution by an Information Handling System (IHS), cause the IHS to:

as part of a factory provisioning of the IHS, wherein the factory provisioning is conducted as part of a secure manufacture of the IHS:

store a key injection authorization certificate for authorizing key injection by the renter; and

upon a transfer of control or ownership of the IHS:

validate a key injection request certificate provided by the renter; and

authorize use of the key injection request certificate for transferring credentials of the renter to the IHS for use by a security processor of the IHS, wherein the credentials transferred to the IHS using the key injection request certificate are utilized by the security processor to establish a root of trust that is based on instructions provided by the renter.

10. The memory storage device of claim 9 , wherein the key injection authorization certificate specifies an identity of the IHS as being authorized for key injection by the renter, and wherein the key injection request certificate specifies an identity of the IHS that is requested for key injection by the renter.

11. The memory storage device of claim 10 , wherein the identity of the IHS specified in the key injection authorization certificate and in the key injection request certificate comprise a service tag.

12. The memory storage device of claim 10 , wherein transfer of credentials to the IHS is authorized when the identity of the IHS specified in the key injection authorization certificate is the same as the identity of the IHS specified in the key injection request certificate.

13. The memory storage device of claim 9 , wherein the credentials are transferred to a protected memory of the security processor.

14. A method for securing an Information Handling System (IHS), the method comprising:

as part of a factory provisioning of the IHS, wherein the factory provisioning is conducted as part of a secure manufacture of the IHS:

storing a key injection authorization certificate for authorizing key injection by the renter; and

upon a transfer of control or ownership of the IHS:

validating a key injection request certificate provided by the renter; and

authorizing use of the key injection request certificate for transferring credentials of the renter to the IHS for use by a security processor of the IHS, wherein the credentials transferred to the IHS using the key injection request certificate are utilized by the security processor to establish a root of trust that is based on instructions provided by the renter.

15. The method of claim 14 , wherein the key injection authorization certificate specifies an identity of the IHS as being authorized for key injection by the renter, and wherein the key injection request certificate specifies an identity of the IHS that is requested for key injection by the renter.

16. The method of claim 15 , wherein transfer of credentials to the IHS is authorized when the identity of the IHS specified in the key injection authorization certificate is the same as the identity of the IHS specified in the key injection request certificate.

17. The method of claim 15 , wherein the credentials are transferred to a protected memory of the security processor.