Microsoft Technology Licensing, LLC

Sahil S Chavan

David Nunez Tejerina

Lucius B Fleuchaus

Deyang Gu

Pu Liu

Akshay Kishor Kulkarni

Yingchang Charley Zhang

Technology is shown for establishing a chain of trust for an unknown root certificate in an isolated network that is verified using a chain of trust external to the network. A bootstrap executable and a leaf certificate rooted in the external chain of trust are configured with an OID. The leaf certificate is received in the isolated network and used to sign a new root certificate created in the isolated network to create a blob that is stored in a pre-determined location. The bootstrap executable is executed to instantiate a client machine, which retrieves the blob and verifies its signature using the leaf certificate. The client machine verifies that the OID values from the blob and bootstrap executable match. If the signature and OID checks are successful, then the new root certificate is distributed within the isolated network and installed in a PKI certificate chain of trust.

Growing community of inventors

Redmond, WA, United States of America

Sahil S Chavan