Dell Products Inc.

Jeroen Mackenbach

Anantha K Boyapalle

John H Terpstra

An information handling system may determine a personality flag value during a boot process, and execute a system update handler configured for connecting to a control plane. The system may also provision a software application in a current operating system environment or erase the existing operating system and provisional new environment including receiving the software application responsive to a secure profile and validating the software application prior to loading.

Automated persistent context-aware device provisioning

An information handling system includes a virtual trusted platform module (TPM) consumer associated with a virtual machine. The virtual TPM (vTPM) consumer may consume TPM services from a clustered vTPM domain service and determine the connection information of the vTPM domain service. The vTPM consumer transmits a connection request for a TPM operation request to the vTPM domain service, wherein the connection request includes a payload in addition to the connection information. The consumer may also receive a response associated with the TPM operation request from the vTPM domain service.

Clustered virtual trusted platform module domain services system

An information handling system may validate a connection request received from a trusted platform module (TPM)-virtual (vTPM) module according to a policy, wherein the connection request originated from a virtual machine associated with the TPM-vTPM module which consumes services from a clustered vTPM domain service. In response to determining that the connection request is valid based on the policy, the system may determine the vTPM domain service associated to the TPM-vTPM module, and determine whether to route or redirect the connection request according to policy. In response to determining that the connection request is to be redirected, the system may transmit a response to the TPM-vTPM module, wherein the response includes redirect information to the vTPM domain service. In response to determining that the connection request is to be routed, the system may route the connection request to the vTPM domain service.

Clustered virtual trusted platform module domain services with a redirector/router service system

A computing device includes a component verification record, a software BoM, a firmware BoM, and a secure device validation record. The component verification record is obtained from a first distributed ledger and characterizes a provisioning action performed on the computing device in a supply chain of the computing device. The software BoM characterizes software instantiated on the computing device. The firmware BOM characterizes firmware instantiated on the computing device. The secure device validation record is generated by the computing device, is based upon the component verification record, the software BoM, and the firmware BoM, and includes a vulnerability score for the computing device based upon the component verification record, the software BoM, and the firmware BoM. The computing device determines an authenticity of the computing device based on validating the secure device validation record with a second distributed ledger.

Secure device validator ledger

An information handling system may determine a personality flag value during a boot process and execute, responsive to detecting that the information handling system entered a secure environment and based on the personality flag value, a system update handler configured for discovering and connecting to a control plane. The system may also provision a secure ephemeral operating system, including receiving an image of the secure ephemeral operating system from the control plane responsive to a secure profile and validating the image prior to loading the secure ephemeral operating system to a random access memory.

Growing community of inventors

Roosendaal, Netherlands

Jeroen Mackenbach