Validation for an IHS with swappable hardware components
Systems and methods are provided for supporting secure swapping of replaceable hardware components of IHSs (Information Handling Systems). During factory provisioning of an IHS, a factory-signed inventory certificate is uploaded to the IHS that identifies factory-installed hardware of the IHS. Factory provisioning also generates a ledger certificate that identifies replaceable hardware of the IHS that may occasionally be swapped from the IHS. Upon receipt of the IHS by the administrator, validation procedures use the inventory certificate to validate the detected IHS hardware as factory-installed. When discrepancies are identified in the detected hardware, the ledger certificate is retrieved and consulted to determine whether the discrepancy is due to movement of swappable hardware. The ledger certificate is then updated for use in validating the movement of the replaceable hardware.
1 . An Information Handling System (IHS) comprising:
one or more processors; and
one or more memory devices coupled to the one or more processors, the one or more memory devices configured with computer-readable instructions stored thereon that, upon execution by the one or more processors, cause a validation process of the IHS to perform operations that comprise:
retrieve a factory-provisioned inventory certificate that specifies factory-installed hardware of the IHS;
determine whether the factory-provisioned inventory certificate is valid, based, at least in part, upon a public encryption key provided in the factory-provisioned inventory certificate; and
upon a determination the factory-provisioned inventory certificate is valid:
identify a discrepancy between hardware of the IHS detected by a Basic Input/Output System (BIOS), and the factory-installed hardware specified in the factory-provisioned inventory certificate;
retrieve a factory-provisioned ledger certificate that specifies replaceable hardware supported by the IHS;
determine when the discrepancy is due to movement of the replaceable hardware supported by the IHS; and
upon validation of the movement of the replaceable hardware, update the factory-provisioned ledger certificate to indicate the movement of the replaceable hardware supported by the IHS.
2 . The IHS of claim 1 , wherein updates to the factory-provisioned ledger certificate are blocked until the factory-provisioned inventory certificate is used to confirm the IHS as received included only the factory-installed hardware.
3 . The IHS of claim 2 , wherein updates to the factory-provisioned ledger certificate are blocked by a remote access controller of the IHS.
4 . The IHS of claim 1 , wherein the factory-provisioned inventory certificate is stored to a persistent memory of the IHS when the IHS is factory-provisioned.
5 . The IHS of claim 4 , wherein the factory-provisioned ledger certificate is also stored to the persistent memory of the IHS when the IHS is factory-provisioned.
6 . The IHS of claim 1 , wherein the replaceable hardware specified in the factory-provisioned ledger certificate comprises hardware that is not included in a hardware root-of-trust of the IHS.
7 . The IHS of claim 6 , wherein hardware included in the hardware root-of-trust of the IHS comprises at least one of a processor, remote access controller and TPM (Trusted Platform Module).
8 . The IHS of claim 1 , wherein validation of a modification specified in the factory-provisioned ledger certificate does not require validation of any prior modifications to the IHS.
9 . The IHS of claim 1 , wherein updates to the factory-provisioned ledger certificate specify whether a replaceable hardware component of the IHS is installed in the IHS.
10 . The IHS of claim 9 , wherein the factory-provisioned ledger certificate specifies all replaceable hardware components of the IHS that are installed in the IHS.
11 . The IHS of claim 1 , wherein updates to the factory-provisioned ledger certificate specify whether a replaceable hardware component of the IHS is not installed in the IHS.
12 . The IHS of claim 11 , wherein the factory-provisioned ledger certificate specifies a plurality of replaceable hardware components of the IHS that have been authorized for use by the IHS, but are not installed in the IHS.
13 . A method for validating replaceable hardware components of an Information Handling System (IHS), the method comprising:
retrieving, by a pre-boot validation process of the IHS, a factory-provisioned inventory certificate that specifies factory-installed hardware of the IHS;
determining whether the factory-provisioned inventory certificate is valid, based, at least in part, upon a public encryption key provided in the factory-provisioned inventory certificate; and
upon determining the factory-provisioned inventory certificate is valid:
identifying a discrepancy between hardware of the IHS detected by a Basic Input/Output System (BIOS), and the factory-installed hardware specified in the factory-provisioned inventory certificate;
retrieving a factory-provisioned ledger certificate that specifies replaceable hardware supported by the IHS;
determining when the discrepancy is due to movement of the replaceable hardware supported by the IHS; and
upon validating the movement of the replaceable hardware, updating the factory-provisioned ledger certificate to indicate the movement of the replaceable hardware supported by the IHS.
14 . The method of claim 13 , wherein the factory-provisioned inventory certificate is stored to a persistent memory of the IHS during factory-provisioning of the IHS.
15 . The method of claim 14 , wherein the factory-provisioned ledger certificate is also stored to the persistent memory of the IHS during the factory-provisioning of the IHS.
16 . The method of claim 13 , wherein the replaceable hardware specified in the factory-provisioned ledger certificate comprises hardware not included in a hardware root-of-trust of the IHS.
17 . The method of claim 13 , wherein updating the factory-provisioned ledger certificate specifies whether a replaceable hardware component of the IHS is installed in the IHS.
18 . The method of claim 13 , wherein updating the factory-provisioned ledger certificate specifies whether a replaceable hardware component of the IHS is not installed in the IHS.
19 . A computer-readable storage device configured with instructions stored thereon to provide validation of replaceable hardware components of an Information Handling System (IHS), wherein execution of the instructions by one or more processors of the IHS causes a pre-boot validation process of the IHS to perform operations that comprise:
retrieve a factory-provisioned inventory certificate that specifies factory-installed hardware of the IHS;
determine whether the factory-provisioned inventory certificate is valid, based, at least in part, upon a public encryption key provided in the factory-provisioned inventory certificate; and
upon a determination the factory-provisioned inventory certificate is valid:
identify a discrepancy between hardware of the IHS detected by a Basic Input/Output System (BIOS), and the factory-installed hardware specified in the factory-provisioned inventory certificate;
retrieve a factory-provisioned ledger certificate that specifies replaceable hardware supported by the IHS;
determine when the discrepancy is due to movement of the replaceable hardware supported by the IHS; and
upon validation of the movement of the replaceable hardware, update the factory-provisioned ledger certificate to indicate the movement of the replaceable hardware supported by the IHS.
20 . The computer-readable storage device of claim 19 , wherein the factory-provisioned inventory certificate and the factory-provisioned ledger certificate are both stored to a persistent memory of the IHS when the IHS is factory-provisioned.