Systems and methods for authenticating hardware of an information handling system
As part of a factory provisioning of an Information Handling System (IHS), a signed replaceable hardware certificate is stored that identifies any replaceable hardware components coupled to the IHS during the factory provisioning. Upon a transfer of control or ownership of the IHS, replaceable hardware components that are coupled to the IHS are detected, and the replaceable hardware certificate is utilized to validate that the identified replaceable hardware components detected as coupled to the IHS are the same replaceable hardware components coupled to the IHS during the factory provisioning. A security processor of the IHS may support boot code operations for generating additional replaceable hardware certificates that can be used to validate the integrity of any changes the replaceable hardware of the IHS, such as upon its next power cycle.
1. A security processor installed in an IHS (Information Handling System), the security processor comprising:
a logic unit; and
a memory coupled to the logic unit, the memory having program instructions stored thereon that, upon execution by the logic unit, cause the security processor to:
as part of a factory provisioning of the IHS for use by a renter, wherein the factory provisioning is conducted as part of a secure manufacture of the IHS:
store a first signed replaceable hardware certificate that identifies any replaceable hardware components coupled to the IHS during the factory provisioning; and
upon a transfer of control or ownership of the security processor to the renter:
identify replaceable hardware components that are detected as coupled to the IHS when used by the renter; and
utilize the first signed replaceable hardware certificate to validate that the replaceable hardware components detected as coupled to the IHS when used by the renter are the same replaceable hardware components coupled to the IHS during the factory provisioning.
2. The security processor of claim 1 , wherein, upon the transfer of control or ownership of the security processor, the execution of the instructions by the logic unit further causes the security processor to: detect a change to the replaceable hardware coupled to the IHS; and initiate boot code operations for generating a second replaceable hardware certificate that identifies the changed replaceable hardware components coupled to the IHS.
3. The security processor of claim 2 , wherein the second replaceable hardware certificate is signed by an embedded certificate authority of the security processor.
4. The security processor of claim 2 , wherein, upon the transfer of control or ownership of the security processor, the execution of the instructions by the logic unit further causes the security processor to: store the second replaceable hardware certificate for use in validating the authenticity of the replaceable hardware detected as coupled to the IHS upon its next power cycle.
5. The security processor of claim 2 , wherein the second replaceable hardware certificate is generated based on instructions validated based on security credentials imported to the IHS by the renter.
6. The security processor of claim 5 , wherein the security credentials are imported by the renter based on validation of the IHS being factory provisioned to support secure transfer of security credentials by the renter.
7. The security processor of claim 1 , wherein the replaceable hardware components specified in the first signed replaceable hardware certificate are identified based on at least one of part numbers and model numbers assigned to the respective hardware components.
8. The security processor of claim 1 , wherein, during a trusted administration of the IHS by an owner of the IHS, the execution of the instructions by the logic unit further causes the security processor to: store a signed third replaceable hardware certificate that identifies replaceable hardware components coupled to the IHS during the trusted administration.
9. The security processor of claim 1 , wherein the factory provisioning of the IHS is performed by an owner of the IHS.
10. A memory storage device having program instructions stored thereon that, upon execution by an Information Handling System (IHS), cause the IHS to:
as part of a factory provisioning of the IHS for use by a renter, wherein the factory provisioning is conducted as part of a secure manufacture of the IHS:
store a first signed replaceable hardware certificate that identifies any replaceable hardware components coupled to the IHS during the factory provisioning; and
upon a transfer of control or ownership of the IHS to the renter:
identify replaceable hardware components that are detected as coupled to the IHS when used by the renter; and
utilize the first signed replaceable hardware certificate to validate that the replaceable hardware components detected as coupled to the IHS when used by the renter are the same replaceable hardware components coupled to the IHS during the factory provisioning.
11. The memory storage device of claim 10 , wherein, upon the transfer of control or ownership of the IHS, the execution of the instructions by the logic unit further causes the IHS to: detect a change to the replaceable hardware coupled to the IHS; and initiate boot code operations for generating a second replaceable hardware certificate that identifies the changed replaceable hardware components coupled to the IHS.
12. The memory storage device of claim 11 , wherein the second replaceable hardware certificate is signed by an embedded certificate authority of a security processor of the IHS.
13. The memory storage device of claim 11 , wherein, upon the transfer of control or ownership of the IHS, the execution of the instructions by the logic unit further causes the IHS to: store the second replaceable hardware certificate for use in validating the authenticity of the replaceable hardware detected as coupled to the IHS upon its next power cycle.
14. The memory storage device of claim 10 , wherein the replaceable hardware components specified in the first signed replaceable hardware certificate are identified based on at least one of part numbers and model numbers assigned to the respective hardware components.
15. The memory storage device of claim 10 , wherein, during a trusted administration of the IHS by an owner of the IHS, the execution of the instructions by the logic unit further causes the IHS to: store a signed third replaceable hardware certificate that identifies replaceable hardware components coupled to the IHS during the trusted administration.
16. A method for securing an Information Handling System (IHS), the method comprising:
as part of a factory provisioning of the IHS for use by a renter, wherein the factory provisioning is conducted as part of a secure manufacture of the IHS:
storing a first signed replaceable hardware certificate that identifies any replaceable hardware components coupled to the IHS during the factory provisioning; and
upon a transfer of control or ownership of the IHS to the renter:
identifying replaceable hardware components that are detected as coupled to the IHS when used by the renter; and
utilizing the first signed replaceable hardware certificate to validate that the replaceable hardware components detected as coupled to the IHS when used by the renter are the same replaceable hardware components coupled to the IHS during the factory provisioning.
17. The method of claim 16 , further comprising, upon the transfer of control or ownership of the IHS, detecting a change to the replaceable hardware coupled to the IHS and initiating boot code operations for generating a second replaceable hardware certificate that identifies the changed replaceable hardware components coupled to the IHS.
18. The method of claim 17 , wherein the second replaceable hardware certificate is signed by an embedded certificate authority of a security processor of the IHS.
19. The method of claim 17 , further comprising, upon the transfer of control or ownership of the IHS, storing the second replaceable hardware certificate for use in validating the authenticity of the replaceable hardware detected as coupled to the IHS upon its next power cycle.
20. The method of claim 17 , further comprising, during a trusted administration of the IHS by an owner of the IHS, storing a signed third replaceable hardware certificate that identifies replaceable hardware components coupled to the IHS during the trusted administration.