Secure device state apparatus and method and lifecycle management

A method of provisioning a semiconductor chip device, the method comprising:

• determining that the semiconductor chip device is ready for provisioning based on a bit pattern stored in device fuses within the semiconductor chip device;
• writing boot processing code to non-volatile memory of the semiconductor chip device;
• verifying an authenticity of the boot processing code;
• creating, using a certificate, a device initialization key for generating a plurality of provisioning keys;
• disabling the certificate used to create the device initialization key for generating the provisioning keys by blowing device fuses associated with the certificate, the blowing of the device fuses associated with the certificate preventing an embedded processor of the semiconductor chip device or an external device from accessing the certificate or recreating the device initialization key;
• exporting the device initialization key to a key management server;
• deriving the provisioning keys using the device initialization key and the boot processing code;
• proving identity to the key management server by providing a device ID and one of the provisioning keys;
• decrypting provisioning data using another of the provisioning keys;
• and
• verifying that the provisioning data is valid.