US 12,229,241 B2
Validating secure assembly and delivery of information handling systems
Jason Matthew Young, Round Rock, TX (US); Marshal F. Savage, Austin, TX (US); and Mukund P. Khatri, Austin, TX (US)
Assigned to Dell Products, L.P., Round Rock, TX (US)
Filed by Dell Products, L.P., Round Rock, TX (US)
Filed on Dec. 30, 2020, as Appl. No. 17/137,849.
Prior Publication US 2022/0207126 A1, Jun. 30, 2022
Int. Cl. G06F 21/00 (2013.01); G06F 21/44 (2013.01); H04L 9/32 (2006.01); H04L 29/06 (2006.01)
CPC G06F 21/44 (2013.01) [H04L 9/3268 (2013.01)] 18 Claims
OG exemplary drawing
 
1. A method for validating secure assembly and delivery of an IHS (Information Handling System), the method comprising:
initiating, by the IHS, a pre-boot operating environment comprising a validation process that operates prior to booting an operating system of the IHS;
retrieving, by the validation process of the IHS, an inventory certificate uploaded to the IHS during factory provisioning of the IHS, wherein the inventory certificate includes a signed inventory identifying a plurality of hardware components installed during factory assembly of the IHS, wherein the inventory certificate is uploaded to a non-removeable, persistent memory of the IHS during the factory provisioning of the IHS, and wherein the inventory certificate is a public key identity certificate generated in response to a CSR (Certificate Signing Request) generated by the IHS during the factory provisioning of the IHS;
utilizing, by the validation process of the IHS, a public key included in the inventory certificate to validate the signed inventory was cryptographically signed by the IHS;
collecting, by the validation process of the IHS, an inventory of detected hardware components of the IHS; and
comparing, by the validation process of the IHS, the collected inventory of detected hardware components against the signed inventory from the inventory certificate uploaded to the IHS during factory provisioning of the IHS in order to validate the detected hardware components of the IHS as the same hardware components installed during factory assembly of the IHS.