US 12,003,638 B2
Secure provisioning of operating systems
Ulrich Mueller, Redmond, WA (US); Aleksandr Mikhailovich Gershaft, Redmond, WA (US); Christopher W. McCarron, Hartford, CT (US); and Marwan E. Jubran, Redmond, WA (US)
Assigned to MICROSOFT TECHNOLOGY LICENSING, LLC, Redmond, WA (US)
Filed by MICROSOFT TECHNOLOGY LICENSING, LLC, Redmond, WA (US)
Filed on Jul. 1, 2022, as Appl. No. 17/830,575.
Application 17/830,575 is a continuation of application No. 16/565,480, filed on Sep. 9, 2019, granted, now 11,394,548.
Application 16/565,480 is a continuation of application No. 15/043,224, filed on Feb. 12, 2016, granted, now 10,425,229, issued on Sep. 24, 2019.
Prior Publication US 2022/0329425 A1, Oct. 13, 2022
Int. Cl. H04L 29/06 (2006.01); G06F 8/61 (2018.01); G06F 21/44 (2013.01); G06F 21/57 (2013.01); G06F 21/72 (2013.01); G06F 21/78 (2013.01); H04L 9/08 (2006.01); H04L 9/30 (2006.01); H04L 9/32 (2006.01); H04L 9/40 (2022.01)
CPC H04L 9/30 (2013.01) [G06F 8/63 (2013.01); G06F 21/44 (2013.01); G06F 21/57 (2013.01); G06F 21/72 (2013.01); G06F 21/78 (2013.01); H04L 9/0897 (2013.01); H04L 9/3263 (2013.01); H04L 63/0428 (2013.01); H04L 2209/127 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A computerized system comprising:
one or more computer processors; and
computer memory storing computer-useable instructions that, when used by the one or more computer processors, cause the one or more computer processors to perform operations comprising:
communicating, from a server in a current physical location, a request to securely provision an operating system for the server, the server having a hardware encryption module associated with a public key that is stored in a key database prior to deployment of the server to the current physical location, the public key is associated with authenticating the server in establishing a secure remote communication session, the server is configured to perform provisioning operations using a delegated imaging service, the key database and the delegated imaging service are remote from the current physical location associated with the server,
wherein the request causes authentication of the server using the public key associated with the hardware encryption module and identification of the delegated imaging service to provision the server with an updated operating system image;
based on authentication of the server, receiving, at the server, an indication from a datacenter manager that the server is to provision itself with the updated operating system image via the provisioning operations associated with the delegated imaging service that encrypts the updated operating system image utilizing an encryption key; and
causing the server to be provisioned using the updated operating system.