Abstract: A system for verifying unique components are installed in an end user information handling system comprises a manufacturing facility collecting component information into a data structure, encrypting the data structure, creating a secured component verification (SCV) certificate, signing the SCV certificate and communicating the SCV certificate to a repository, the repository storing the signed SCV certificate. A copy of the signed SCV certificate is saved onto the information handling system. When the information handling system is delivered, the copy of the SCV certificate is compared with the SCV certificate stored in the repository. If they match, the information handling system is verified. If a unique component is replaced, a delta certificate is created and stored with the original SCV certificate in the repository such that all changes to unique components in the information handling system are tracked.

Abstract: Methods and system are provided for validating the secure assembly and delivery of an IHS (Information Handling System). During factory provisioning of the IHS, an inventory certificate is uploaded to the IHS. The certificate includes: an inventory of hardware components installed during factory assembly of the IHS, validation schemas the provide instructions for identifying the hardware components, and digital signatures used to confirm the integrity of the validation schemas. Upon delivery of the IHS, a validation process retrieves the inventory certificate and confirms the integrity of the validation schemas. Based on validation schema instructions, the validation process collects an inventory of the detected IHS hardware. The validation schema instructions are further used to compare the collected inventory against the inventory from the inventory certificate in order to validate the detected hardware components of the IHS as the same hardware components installed during factory assembly of the IHS.

Abstract: Methods and systems are provided for validating and registering an IHS (Information Handling System) and components of the IHS for technical support. Upon delivery and initialization of an IHS, an inventory certificate that was uploaded to the IHS during factory provisioning of the IHS is retrieved. The inventory certificate includes an inventory that identifies factory-installed hardware components in the IHS. The inventory also specifies whether a registration requirement has been specified for the IHS, such as to initiate technical support. While still operating a pre-boot validation process, an inventory is collected of the detected hardware components of the IHS. Based on the inventory certificate, the validation process confirms whether a detected hardware component is a factory-installed hardware component and determines whether registration is required. If required, registration of the IHS is initiated by the validation process and initialization of the IHS continues.

Abstract: According to embodiments of the present disclosure, systems and methods for SPDM device and BMC pairing are provided. According to one embodiment, an Information Handling System (IHS) includes a Security Protocol and Data Model (SPDM)-enabled device conforming to a SPDM specification, and a Baseboard Management Controller (BMC) configured with computer executable instructions to provision a SPDM identity certificate of the BMC in the SPDM-enabled device, verify that the BMC has been paired with the SPDM-enabled device using the SPDM identity certificate, and when the authentication of the SPDM-enabled device fails, inhibit operation of the SPDM-enabled device in the IHS.

Abstract: According to embodiments of the present disclosure, an Information Handling System (IHS) including multiple Security Protocol and Data Model (SPDM)-enabled devices is configured to perform collective attestation. The collective attestation is provided by computer-executable instructions that, when executed by a processor of the IHS, receive an attestation request from a requesting device and a device identity certificate from each of the devices. Using the device identity certificates, the instructions perform a cryptographic hash over the received device identity certificates, and send the cryptographic hash to the requesting device in response to the request.

Abstract: According to embodiments of the present disclosure, a Security Protocol and Data Model (SPDM)-enabled device uses a device identity to provide, among other things, storing of warranty information, and a technique to uniquely identify the SPDM-enabled device so that its movement can be tracked. An Information Handling System (IHS) includes a processor and a memory coupled to the processor, the memory having program instructions that, upon execution, cause the IHS to obtain context information associated with the SPDM-enabled device conforming to a SPDM specification, generate an identity certificate including the context information, and store the certificate in a slot of the SPDM-enabled device.

Abstract: An information handling system may include at least one processor and a memory. The information handling system may be configured to: receive an instruction from a user; cause the instruction to be executed, wherein executing the instruction generates a response; parse the response to determine whether any failures are associated therewith; and provide a recommended instruction to the user, wherein the recommended instruction is executable to locate and/or remediate an issue associated with the information handling system.

Abstract: A system for verifying unique components are installed in an end user information handling system comprises a manufacturing facility collecting component information into a data structure, encrypting the data structure, creating a secured component verification (SCV) certificate, signing the SCV certificate and communicating the SCV certificate to a repository, the repository storing the signed SCV certificate. A copy of the signed SCV certificate is saved onto the information handling system. When the information handling system is delivered, the copy of the SCV certificate is compared with the SCV certificate stored in the repository. If they match, the information handling system is verified. If a unique component is replaced, a delta certificate is created and stored with the original SCV certificate in the repository such that all changes to unique components in the information handling system are tracked.

Abstract: Methods and systems are provided for validating and registering an IHS (Information Handling System) and components of the IHS for technical support. Upon delivery and initialization of an IHS, an inventory certificate that was uploaded to the IHS during factory provisioning of the IHS is retrieved. The inventory certificate includes an inventory that identifies factory-installed hardware components in the IHS. The inventory also specifies whether a registration requirement has been specified for the IHS, such as to initiate technical support. While still operating a pre-boot validation process, an inventory is collected of the detected hardware components of the IHS. Based on the inventory certificate, the validation process confirms whether a detected hardware component is a factory-installed hardware component and determines whether registration is required. If required, registration of the IHS is initiated by the validation process and initialization of the IHS continues.

Abstract: Systems and procedures are provided for provisioning an IHS (Information Handling System) to support validation of hardware components of the IHS. As part of manufacture of the IHS, an inventory of factory-installed hardware components of the IHS is generated. During factory provisioning, cryptographic capabilities of the IHS are used to generate a keypair, with the generated private key stored to a protected memory of the IHS. The inventory of factory-installed hardware components is signed using the private key. A trusted component of the IHS generates a certificate signing request (CSR) including the public key of the generated keypair, the digitally signed inventory and extensions identifying the factory-installed hardware components. A signed identity certificate is generated that attests to the digitally signed inventory, ownership of the private key corresponding to the public key from the CSR, and the extensions identifying the factory-installed hardware components of the IHS.

Abstract: Methods and system are provided for validating the secure assembly and delivery of an IHS (Information Handling System). During factory provisioning of the IHS, an inventory certificate is uploaded to the IHS, where the certificate includes an inventory of the hardware components installed during factory assembly of the IHS and also includes validation schemas the provide instructions for identifying hardware components of the IHS. Upon delivery of the assembled IHS, a validation process is initialized and the inventory certificate is retrieved. Based on the instructions set forth by the validation schemas, the validation process collects an inventory of the detected hardware components of the IHS. The instructions of the validation schemas are further used to compare the collected inventory against the inventory from the signed inventory certificate in order to validate the detected hardware components of the IHS as the same hardware components installed during factory assembly of the IHS.

Abstract: Methods and system are provided for validating the secure assembly and delivery of an IHS (Information Handling System). During factory provisioning of the IHS, an inventory certificate is uploaded to the IHS. The certificate includes: an inventory of hardware components installed during factory assembly of the IHS, validation schemas the provide instructions for identifying the hardware components, and digital signatures used to confirm the integrity of the validation schemas. Upon delivery of the IHS, a validation process retrieves the inventory certificate and confirms the integrity of the validation schemas. Based on validation schema instructions, the validation process collects an inventory of the detected IHS hardware. The validation schema instructions are further used to compare the collected inventory against the inventory from the inventory certificate in order to validate the detected hardware components of the IHS as the same hardware components installed during factory assembly of the IHS.

Abstract: Methods and system are provided for validating the secure assembly and delivery of an IHS (Information Handling System). During factory provisioning of the IHS, an inventory certificate is uploaded to the IHS, where the certificate includes an inventory of the hardware components installed during factory assembly of the IHS and also includes validation schemas the provide instructions for identifying hardware components of the IHS. Upon delivery of the assembled IHS, a validation process is initialized and the inventory certificate is retrieved. Based on the instructions set forth by the validation schemas, the validation process collects an inventory of the detected hardware components of the IHS. The instructions of the validation schemas are further used to compare the collected inventory against the inventory from the signed inventory certificate in order to validate the detected hardware components of the IHS as the same hardware components installed during factory assembly of the IHS.