Abstract: Systems and procedures are provided for provisioning an IHS (Information Handling System) to support validation of hardware components of the IHS. As part of manufacture of the IHS, an inventory of factory-installed hardware components of the IHS is generated. During factory provisioning, cryptographic capabilities of the IHS are used to generate a keypair, with the generated private key stored to a protected memory of the IHS. The inventory of factory-installed hardware components is signed using the private key. A trusted component of the IHS generates a certificate signing request (CSR) including the public key of the generated keypair, the digitally signed inventory and extensions identifying the factory-installed hardware components. A signed identity certificate is generated that attests to the digitally signed inventory, ownership of the private key corresponding to the public key from the CSR, and the extensions identifying the factory-installed hardware components of the IHS.

Abstract: Methods and system are provided for validating the secure assembly and delivery of an IHS (Information Handling System). During factory provisioning of the IHS, an inventory certificate is uploaded to the IHS, where the certificate includes an inventory of the hardware components installed during factory assembly of the IHS and also includes validation schemas the provide instructions for identifying hardware components of the IHS. Upon delivery of the assembled IHS, a validation process is initialized and the inventory certificate is retrieved. Based on the instructions set forth by the validation schemas, the validation process collects an inventory of the detected hardware components of the IHS. The instructions of the validation schemas are further used to compare the collected inventory against the inventory from the signed inventory certificate in order to validate the detected hardware components of the IHS as the same hardware components installed during factory assembly of the IHS.

Abstract: Methods and system are provided for validating the secure assembly and delivery of an IHS (Information Handling System). During factory provisioning of the IHS, an inventory certificate is uploaded to the IHS, where the certificate includes an inventory of the hardware components installed during factory assembly of the IHS and also includes validation schemas the provide instructions for identifying hardware components of the IHS. Upon delivery of the assembled IHS, a validation process is initialized and the inventory certificate is retrieved. Based on the instructions set forth by the validation schemas, the validation process collects an inventory of the detected hardware components of the IHS. The instructions of the validation schemas are further used to compare the collected inventory against the inventory from the signed inventory certificate in order to validate the detected hardware components of the IHS as the same hardware components installed during factory assembly of the IHS.