SECURE DEVICE REFERRAL TO SECOND ENVIRONMENT SYSTEM
One embodiment provides a method, the method including: receiving, from a device at a first environment system, an enterprise configuration request; verifying, at the first environment system, an identity of the device; identifying, at the first environment system, the device is assigned to a second environment system; and providing, at the first environment system, instructions for the device to access the second environment system, wherein the providing comprises providing encryption information to the device to verify the second environment system. Other aspects are claimed and described.
1 . A method, the method comprising:
receiving, from a device at a first environment system, an enterprise configuration request;
verifying, at the first environment system, an identity of the device;
identifying, at the first environment system, the device is assigned to a second environment system; and
providing, at the first environment system, instructions for the device to access the second environment system, wherein the providing comprises providing encryption information to the device to verify the second environment system.
2 . The method of claim 1 , wherein the providing encryption information comprises providing a public key that the device presents at the second environment system that the second environment system utilizes to verify the device.
3 . The method of claim 2 , wherein the public key comprises a public key provided to the first environment system from the second environment system and corresponds to a private key held by the second environment system.
4 . The method of claim 1 , wherein the providing encryption information comprises providing an encryption certificate that the device presents at the second environment system to verify encryption information provided by the second environment system in response to the encryption certificate.
5 . The method of claim 1 , wherein the identifying comprises identifying the device is assigned, within a database accessible by the first environment system, to an entity hosting the second environment system.
6 . The method of claim 1 , wherein the verifying comprises validating the device using a public key of the first environment system against a private key stored within the device.
7 . The method of claim 1 , wherein the providing instructions comprises providing, from the first environment system, signed metadata indicating an endpoint of the second environment system;
wherein the signed metadata is signed by the first environment system utilizing a private key of the first environment system;
wherein the device verifies a signature of the signed metadata against a signature certificate stored on the device and generated utilizing the private key of the first environment system.
8 . The method of claim 1 , wherein the providing instructions comprises identifying an endpoint corresponding to the second environment system.
9 . The method of claim 1 , wherein the receiving an enterprise configuration request comprises receiving a zero-touch configuration request.
10 . The method of claim 1 , wherein the first environment system and the second environment system comprise cloud service providers.
11 . A system, the system comprising:
a processor;
a memory device that stores instructions that, when executed by the processor, causes the system to:
receive, from a device at a first environment system, an enterprise configuration request;
verify, at the first environment system, an identity of the device;
identify, at the first environment system, the device is assigned to a second environment system; and
provide, at the first environment system, instructions for the device to access the second environment system, wherein the providing comprises providing encryption information to the device to verify the second environment system.
12 . The system of claim 11 , wherein the providing encryption information comprises providing a public key that the device presents at the second environment system that the second environment system utilizes to verify the device.
13 . The system of claim 12 , wherein the public key comprises a public key provided to the first environment system from the second environment system and corresponds to a private key held by the second environment system.
14 . The system of claim 11 , wherein the providing encryption information comprises providing an encryption certificate that the device presents at the second environment system to verify encryption information provided by the second environment system in response to the encryption certificate.
15 . The system of claim 11 , wherein the identifying comprises identifying the device is assigned, within a database accessible by the first environment system, to an entity hosting the second environment system.
16 . The system of claim 11 , wherein the verifying comprises validating the device using a public key of the first environment system against a private key stored within the device.
17 . The system of claim 11 , wherein the providing instructions comprises providing, from the first environment system, signed metadata indicating an endpoint of the second environment system;
wherein the signed metadata is signed by the first environment system utilizing a private key of the first environment system;
wherein the device verifies a signature of the signed metadata against a signature certificate stored on the device and generated utilizing the private key of the first environment system.
18 . The system of claim 11 , wherein the providing instructions comprises identifying an endpoint corresponding to the second environment system.
19 . The system of claim 11 , wherein the receiving an enterprise configuration request comprises receiving a zero-touch configuration request.
20 . A product, the product comprising:
a computer-readable storage device that stores executable code that, when executed by a processor, causes the product to:
receive, from a device at a first environment system, an enterprise configuration request;
verify, at the first environment system, an identity of the device;
identify, at the first environment system, the device is assigned to a second environment system; and
provide, at the first environment system, instructions for the device to access the second environment system, wherein the providing comprises providing encryption information to the device to verify the second environment system.