Fast identity online (FIDO) device onboarding (FDO) protocol computing device hardware attestation system

1. A networked system, comprising:

a computing device manufacturer system;

an end user system; and

a voucher management system that is coupled to the computing device manufacturer system and the end user system via a network, wherein the voucher management system is configured to:

receive, from the computing device manufacturer system:

an ownership voucher having first ownership transfer data including a voucher management system public key that has been signed by a computing device manufacturer system private key in order to transfer ownership of a computing device from the computing device manufacturer system to the voucher management system; and

a hardware attestation certificate for the computing device that identifies a hardware inventory of the computing device and that is configured to verify that the computing device has not been altered subsequent to its manufacture;

associate the ownership voucher and the hardware attestation certificate with the computing device in a voucher management database; and

determine that the ownership of the computing device should be transferred to the end user system and, in response:

automatically generate, in response to determining that ownership of the computing device should be transferred to the end user system, second ownership transfer data by signing an end user system public key with a voucher management system private key;

provide the second ownership transfer data in the ownership voucher in order to transfer ownership of the computing device from the voucher management system to the end user system; and

provide the ownership voucher and the hardware attestation certificate to the end user system.

2. The system of claim 1 , wherein the voucher management system is configured to:

retrieve the end user system public key that is signed by the voucher management system private key from the end user system.

3. The system of claim 1 , wherein the voucher management system is configured to:

receive, from the computing device manufacturer system along with the ownership voucher, an end user system identifier identifying the end user system; and

associate the end user system identifier with the ownership voucher and the hardware attestation certificate in the voucher management database.

4. The system of claim 1 , wherein the voucher management system is configured to:

receive, from the end user system, authentication information;

authenticate, using the end user information, the end user system; and

display, in response to authenticating the end user system and use the end user system identifier included in the authentication information, the ownership voucher and the hardware attestation certificate associated with the end user system identifier in the voucher management database.

5. The system of claim 1 , wherein the hardware inventory of the computing device identified by the hardware attestation certificate is an inventory of the computing device ordered by an end user associated with the end user system.

6. The system of claim 1 , wherein the hardware attestation certificate is signed with the computing device manufacturer system private key.

7. The system of claim 1 , wherein the end user system is configured to:

use the hardware attestation certificate to verify that the computing device has not been altered subsequent to its manufacture; and

use, in response to verifying that the computing device has not been altered subsequent to its manufacture, the ownership voucher to onboard the computing device.

8. An Information Handling System (IHS), comprising:

a processing system; and

a memory system that is coupled to the processing system and that includes instructions that, when executed by the processing system, cause the processing system to provide a voucher management engine that is configured to:

receive, from a computing device manufacturer system:

an ownership voucher having first ownership transfer data including a voucher management system public key that has been signed by a computing device manufacturer system private key in order to transfer ownership of a computing device from the computing device manufacturer system to the voucher management system; and

a hardware attestation certificate for the computing device that identifies a hardware inventory of the computing device and that is configured to verify that the computing device has not been altered subsequent to its manufacture;

associate the ownership voucher and the hardware attestation certificate with the computing device in a voucher management database; and

determine that the ownership of the computing device should be transferred to the end user system and, in response:

automatically generate, in response to determining that ownership of the computing device should be transferred to the end user system, second ownership transfer data by signing an end user system public key with a voucher management system private key;

provide the second ownership transfer data in the ownership voucher in order to transfer ownership of the computing device from the voucher management system to the end user system; and

provide the ownership voucher and the hardware attestation certificate to the end user system.

9. The IHS of claim 8 , wherein the voucher management engine is configured to:

retrieve the end user system public key that is signed by the voucher management system private key from the end user system.

10. The IHS of claim 8 , wherein the voucher management engine is configured to:

receive, from the computing device manufacturer system along with the ownership voucher, an end user system identifier identifying the end user system; and

associate the end user system identifier with the ownership voucher and the hardware attestation certificate in the voucher management database.

11. The IHS of claim 8 , wherein the voucher management engine is configured to:

receive, from the end user system, authentication information;

authenticate, using the end user information, the end user system; and

display, in response to authenticating the end user system and use the end user system identifier included in the authentication information, the ownership voucher and the hardware attestation certificate associated with the end user system identifier in the voucher management database.

12. The IHS of claim 8 , wherein the hardware inventory of the computing device identified by the hardware attestation certificate is an inventory of the computing device ordered by an end user associated with the end user system.

13. The IHS of claim 8 , wherein the hardware attestation certificate is signed with the computing device manufacturer system private key.

14. A method for Fast IDentity Online (FIDO) Device Onboarding (FDO) protocol computing device hardware attestation, comprising:

receiving, by a voucher management system from a computing device manufacturer system:

an ownership voucher having first ownership transfer data including a voucher management system public key that has been signed by a computing device manufacturer system private key in order to transfer ownership of a computing device from the computing device manufacturer system to the voucher management system; and

a hardware attestation certificate for the computing device that identifies a hardware inventory of the computing device and that is configured to verify that the computing device has not been altered subsequent to its manufacture;

associating, by the voucher management system, the ownership voucher and the hardware attestation certificate with the computing device in a voucher management database; and

determining, by the voucher management system, that the ownership of the computing device should be transferred to the end user system and, in response:

automatically generating, by the voucher management system in response to determining that ownership of the computing device should be transferred to the end user system, second ownership transfer data by signing an end user system public key with a voucher management system private key;

providing, by the voucher management system, the second ownership transfer data in the ownership voucher in order to transfer ownership of the computing device from the voucher management system to the end user system; and

providing, by the voucher management system, the ownership voucher and the hardware attestation certificate to the end user system.

15. The method of claim 14 , further comprising:

retrieving, by the voucher management system, the end user system public key that is signed by the voucher management system private key from the end user system.

16. The method of claim 15 , further comprising:

receiving, by the voucher management system from the computing device manufacturer system along with the ownership voucher, an end user system identifier identifying the end user system; and

associating, by the voucher management system, the end user system identifier with the ownership voucher and the hardware attestation certificate in the voucher management database.

17. The method of claim 14 , further comprising:

receiving, by the voucher management system from the end user system, authentication information;

authenticating, by the voucher management system using the end user information, the end user system; and

displaying, by the voucher management system in response to authenticating the end user system and use the end user system identifier included in the authentication information, the ownership voucher and the hardware attestation certificate associated with the end user system identifier in the voucher management database.

18. The method of claim 17 , wherein the hardware inventory of the computing device identified by the hardware attestation certificate is an inventory of the computing device ordered by an end user associated with the end user system.

19. The method of claim 18 , wherein the hardware attestation certificate is signed with the computing device manufacturer system private key.

20. The method of claim 19 , further comprising:

using, by the end user system, the hardware attestation certificate to verify that the computing device has not been altered subsequent to its manufacture; and

using, by the end user system in response to verifying that the computing device has not been altered subsequent to its manufacture, the ownership voucher to onboard the computing device.