Platform attestation and registration for servers

A method comprising:

• generating a platform root key;
• creating a data structure to encapsulate the platform root key, the data structure comprising a platform root key and an identification of a registration service;
• deriving a registration seal key from a device key;
• encrypting the platform root key based on the registration seal key;
• and
• transmitting, on a secure connection, the data structure to the registration service to register the platform root key for the first processor of the platform.

At least one computer readable storage medium having instructions stored thereon, the instructions when executed on a machine, cause the machine to:

• store a device certificate received from a key generation facility;
• receive a manifest from a platform, the manifest comprising an identification of a processor associated with the platform, a platform seal key, and a platform provisioning key;
• and
• validate the processor using a stored device certificate.

A system comprising:

• at least one processor;
• at least one memory element;
• and
• a registration service module executable by the at least one processor to:
• store a device certificate received from a key generation facility;
• receive a manifest from a platform, the manifest comprising an identification of a processor associated with the platform, and an encrypted platform root key that is encrypted based on a registration seal key that is derived from a device key;
• and
• validate the processor using a stored device certificate.