Method for migrating a base chip key from one computer system to another

Abstract

A method for migrating a base chip key from a first computer system to a second computer system is disclosed. A first computer system includes a base chip key, and a second computer system includes a base chip key. Using a first certificate for the base chip key, a manufacturer of the second computer system generates a second certificate for the base chip key. Similarly, using a first certificate for the base chip key, a manufacturer of the first computer system generates a second certificate for the base chip key. A first data packet is then sent from the first computer system to the second computer system. The first data packet includes a first random number and all the data required to reproduce the base chip keyin the first computer system. The first data packet is also encrypted with the base chip key's public key. In return, a second data packet is sent from the second computer system to the first computer system, and the second data packet includes the first random number and a second random number, signed by the base chip key. The base chip keyis then erased from the first computer system. Finally, the base chip keyin the second computer system is replaced by the base chip key